CVE-2026-24077— Integer Underflow (Wrap or Wraparound) in WLAN Host
Possible ATT&CK Techniques 1AI
T1115 · Clipboard DataAffected Version Matrix 144
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | AQT1000 | affected |
AR8035 | affected | ||
CSRA6620 | affected | ||
CSRA6640 | affected | ||
FastConnect 6200 | affected | ||
FastConnect 6700 | affected | ||
FastConnect 6800 | affected | ||
FastConnect 6900 | affected | ||
| … +136 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-24077
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Integer Underflow (Wrap or Wraparound) in WLAN Host
Source: CVE Program / CVE List V5
Vulnerability Description
Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
整数下溢(超界折返)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | AQT1000 | - |
II. Public POCs for CVE-2026-24077
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-24077
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-24077 (1)
Same Patch Batch · Qualcomm, Inc. · 2026-08-04 · 11 CVEs total
| CVE-2026-25289 | 9.6 CRITICAL | Stack-based Buffer Overflow in WLAN Firmware |
| CVE-2026-24079 | 8.1 HIGH | Missing Authentication for Critical Function in Data Modem |
| CVE-2026-24083 | 7.8 HIGH | Untrusted Pointer Dereference in Automotive Security |
| CVE-2026-24080 | 7.8 HIGH | Buffer Copy Without Checking Size of Input in Biometrics |
| CVE-2026-21366 | 7.8 HIGH | Integer Overflow or Wraparound in Data Network Stack & Connectivity |
| CVE-2026-25292 | 7.6 HIGH | Improper Validation of Syntactic Correctness of Input in Automotive Linux OS |
| CVE-2026-24084 | 7.5 HIGH | Insecure Security Identifier Mechanism in Multi-Mode Call Processor |
| CVE-2026-25288 | 7.4 HIGH | Buffer Over-read in WLAN Firmware |
| CVE-2026-24076 | 6.7 MEDIUM | Buffer Copy Without Checking Size of Input in Bluetooth HOST |
| CVE-2026-24078 | 6.5 MEDIUM | Exposure of Private Personal Information to an Unauthorized Actor in Data Modem |
IV. Related Vulnerabilities
Same product: Snapdragon
- CVE-2026-25292
Improper Validation of Syntactic Correctness of Input in Aut - CVE-2026-25289
Stack-based Buffer Overflow in WLAN Firmware - CVE-2026-25288
Buffer Over-read in WLAN Firmware - CVE-2026-24084
Insecure Security Identifier Mechanism in Multi-Mode Call Pr - CVE-2026-24083
Untrusted Pointer Dereference in Automotive Security
Same vendor: Qualcomm, Inc.
- CVE-2026-25292
Improper Validation of Syntactic Correctness of Input in Aut - CVE-2026-25289
Stack-based Buffer Overflow in WLAN Firmware - CVE-2026-25288
Buffer Over-read in WLAN Firmware - CVE-2026-24084
Insecure Security Identifier Mechanism in Multi-Mode Call Pr - CVE-2026-24083
Untrusted Pointer Dereference in Automotive Security
Same weakness: CWE-191
- CVE-2026-67298
FreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Und - CVE-2026-63362
o6 Automation open62541 Integer Underflow - CVE-2026-13308
Autel MaxiCharger AC Elite Home WebSockets Integer Underflow - CVE-2026-54345
GoPacket's Diameter AVP decoder: uint32 underflow on vendor - CVE-2026-54890
BEAM VM crash via integer underflow in binary_to_term BIT_BI
V. Comments for CVE-2026-24077
No comments yet