CVE-2026-24080
Buffer Copy Without Checking Size of Input in Biometrics
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
Memory Corruption when handling malformed request parameters in the fingerprint TA.
| CWE | CWE-120 |
| Vendor | qualcomm, inc. |
| Product | snapdragon |
| Published | Aug 4, 2026 |
| Last Updated | Aug 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for qualcomm, inc. snapdragon
Be the first to know when new high vulnerabilities affecting qualcomm, inc. snapdragon are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Qualcomm, Inc. / Snapdragon
Cologne FastConnect 6700 FastConnect 6900 FastConnect 7800 QAM8255P QAM8295P QCA6574AU QCA6595AU QCA6678AQ QCA6696 SA6145P SA6150P SA6155P SA8145P SA8150P SA8155P SA8195P SA8255P SA8295P SA8540P SA9000P SW6100 SW6100P Themisto WCD9378C WSA8840 WSA8845 WSA8845H X2000077 X2000086 X2000090 X2000092 X2000094 XG101002 XG101032 XG101039