CVE-2026-24075
Buffer Over-read in Qualcomm IPC
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
| CWE | CWE-126 |
| Vendor | qualcomm, inc. |
| Product | snapdragon |
| Published | Sep 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for qualcomm, inc. snapdragon
Be the first to know when new high vulnerabilities affecting qualcomm, inc. snapdragon are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Qualcomm, Inc. / Snapdragon
AQT1000 Cologne FastConnect 6200 FastConnect 6700 FastConnect 6800 FastConnect 6900 FastConnect 7800 IQX5121 IQX7181 QCA0000 QCA6391 QCA6420 QCA6430 QCM5430 QCM6490 Qualcomm Video Collaboration VC3 Platform SC8380XP SM6250 Snapdragon 7c Compute Platform Snapdragon 7c Gen 2 Compute Platform "Rennell Pro" Snapdragon 7c+ Gen 3 Compute Snapdragon 8c Compute Platform "Poipu Lite" Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite" Snapdragon 8cx Compute Platform Snapdragon 8cx Compute Platform "Poipu Pro" Snapdragon 8cx Gen 2 5G Compute Platform Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro" Snapdragon 8cx Gen 3 Compute Platform Snapdragon X2 Elite WCD9340 WCD9341 WCD9370 WCD9375 WCD9378C WCD9380 WCD9385 WSA8810 WSA8815 WSA8830 WSA8835 WSA8840 WSA8845 WSA8845H