CVE-2026-24073— Out-of-bounds Write in Video

Quick assessment

Affected

Qualcomm, Inc. Snapdragon

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在处理解码统计信息时，由于未充分验证偏移量与结构体大小的关系，导致内存破坏。

CVSS 7.8 · High EPSS 0.10% · P1 Updated Sep 17, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 14

Vendor	Product	Version Range	Status
Qualcomm, Inc.	Snapdragon	`Cologne`	affected
		`FastConnect 6900`	affected
		`FastConnect 7800`	affected
		`IQX5121`	affected
		`IQX7181`	affected
		`QCA0000`	affected
		`SC8380XP`	affected
		`Snapdragon X2 Elite`	affected
… +6 more rows

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Out-of-bounds Write in Video

Source: CVE Program / CVE List V5

Vulnerability Description

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存写

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Qualcomm, Inc.	Snapdragon	Cologne	-

II. Public POCs for CVE-2026-24073

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-24073

请登录查看更多情报信息。

https://www.cve.org/CVERecord?id=CVE-2026-24073

Same Patch Batch · Qualcomm, Inc. · 2026-09-17 · 15 CVEs total

CVE-2026-25283	8.8 HIGH	Stack-based Buffer Overflow in OOBM
CVE-2026-25282	7.9 HIGH	Out-of-bounds Read in OOBM
CVE-2025-59607	7.8 HIGH	Untrusted Pointer Dereference in Windows Compute
CVE-2026-24074	7.8 HIGH	Out-of-bounds Write in Video
CVE-2026-24075	7.8 HIGH	Buffer Over-read in Qualcomm IPC
CVE-2026-25278	7.8 HIGH	Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on
CVE-2026-25280	7.8 HIGH	Out-of-bounds Write in DSP Service
CVE-2026-25290	7.8 HIGH	Integer Overflow or Wraparound in OOBM
CVE-2026-25275	7.5 HIGH	Buffer Over-read in WLAN Firmware
CVE-2026-24081	7.4 HIGH	Buffer Over-read in BT Controller
CVE-2026-25281	7.4 HIGH	Allocation of Resources Without Limits or Throttling in OOBM
CVE-2026-25294	7.4 HIGH	Buffer Over-read in WLAN Firmware
CVE-2026-25284	7.3 HIGH	Buffer Over-read in OOBM
CVE-2026-25261	6.7 MEDIUM	Untrusted Pointer Dereference in Camera

IV. Related Vulnerabilities

Same product: Snapdragon

Same vendor: Qualcomm, Inc.

Same weakness: CWE-787