CVE-2026-24075— Buffer Over-read in Qualcomm IPC

Quick assessment

Affected

Qualcomm, Inc. Snapdragon

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

由于同步机制不完善及竞态条件，当多个线程向设备控制处理器发起并发 IOCTL 请求时，会导致内存损坏。

CVSS 7.8 · High EPSS 0.09% · P0 Updated Sep 17, 2026

Possible ATT&CK Techniques 1 AI

T1650 · Acquire Access

Affected Version Matrix 43

Vendor	Product	Version Range	Status
Qualcomm, Inc.	Snapdragon	`AQT1000`	affected
		`Cologne`	affected
		`FastConnect 6200`	affected
		`FastConnect 6700`	affected
		`FastConnect 6800`	affected
		`FastConnect 6900`	affected
		`FastConnect 7800`	affected
		`IQX5121`	affected
… +35 more rows

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Buffer Over-read in Qualcomm IPC

Source: CVE Program / CVE List V5

Vulnerability Description

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

缓冲区上溢读取

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Qualcomm, Inc.	Snapdragon	AQT1000	-

II. Public POCs for CVE-2026-24075

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-24075

请登录查看更多情报信息。

https://www.cve.org/CVERecord?id=CVE-2026-24075

Same Patch Batch · Qualcomm, Inc. · 2026-09-17 · 15 CVEs total

CVE-2026-25283	8.8 HIGH	Stack-based Buffer Overflow in OOBM
CVE-2026-25282	7.9 HIGH	Out-of-bounds Read in OOBM
CVE-2025-59607	7.8 HIGH	Untrusted Pointer Dereference in Windows Compute
CVE-2026-24073	7.8 HIGH	Out-of-bounds Write in Video
CVE-2026-24074	7.8 HIGH	Out-of-bounds Write in Video
CVE-2026-25278	7.8 HIGH	Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on
CVE-2026-25280	7.8 HIGH	Out-of-bounds Write in DSP Service
CVE-2026-25290	7.8 HIGH	Integer Overflow or Wraparound in OOBM
CVE-2026-25275	7.5 HIGH	Buffer Over-read in WLAN Firmware
CVE-2026-24081	7.4 HIGH	Buffer Over-read in BT Controller
CVE-2026-25281	7.4 HIGH	Allocation of Resources Without Limits or Throttling in OOBM
CVE-2026-25294	7.4 HIGH	Buffer Over-read in WLAN Firmware
CVE-2026-25284	7.3 HIGH	Buffer Over-read in OOBM
CVE-2026-25261	6.7 MEDIUM	Untrusted Pointer Dereference in Camera

IV. Related Vulnerabilities

Same product: Snapdragon

Same vendor: Qualcomm, Inc.

Same weakness: CWE-126