Memory Corruption in Qualcomm Products due to Fastboot Command Handling
CVE-2026-24091

7.2HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
1 June 2026

What is CVE-2026-24091?

A memory corruption vulnerability exists in Qualcomm products triggered by improperly formatted fastboot commands. If exploited, this may lead to unintended behaviors in devices, potentially affecting stability and security. Proper mitigation strategies should be enacted to safeguard against such vulnerabilities to maintain the integrity and performance of affected Qualcomm products.

Affected Version(s)

Snapdragon XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.