CVE-2026-24080— Buffer Copy Without Checking Size of Input in Biometrics
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 36
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | Cologne | affected |
FastConnect 6700 | affected | ||
FastConnect 6900 | affected | ||
FastConnect 7800 | affected | ||
QAM8255P | affected | ||
QAM8295P | affected | ||
QCA6574AU | affected | ||
QCA6595AU | affected | ||
| … +28 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-24080
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Buffer Copy Without Checking Size of Input in Biometrics
Source: CVE Program / CVE List V5
Vulnerability Description
Memory Corruption when handling malformed request parameters in the fingerprint TA.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | Cologne | - |
II. Public POCs for CVE-2026-24080
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-24080
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-24080 (1)
Same Patch Batch · Qualcomm, Inc. · 2026-08-04 · 11 CVEs total
| CVE-2026-25289 | 9.6 CRITICAL | Stack-based Buffer Overflow in WLAN Firmware |
| CVE-2026-24079 | 8.1 HIGH | Missing Authentication for Critical Function in Data Modem |
| CVE-2026-24083 | 7.8 HIGH | Untrusted Pointer Dereference in Automotive Security |
| CVE-2026-21366 | 7.8 HIGH | Integer Overflow or Wraparound in Data Network Stack & Connectivity |
| CVE-2026-25292 | 7.6 HIGH | Improper Validation of Syntactic Correctness of Input in Automotive Linux OS |
| CVE-2026-24084 | 7.5 HIGH | Insecure Security Identifier Mechanism in Multi-Mode Call Processor |
| CVE-2026-25288 | 7.4 HIGH | Buffer Over-read in WLAN Firmware |
| CVE-2026-24076 | 6.7 MEDIUM | Buffer Copy Without Checking Size of Input in Bluetooth HOST |
| CVE-2026-24078 | 6.5 MEDIUM | Exposure of Private Personal Information to an Unauthorized Actor in Data Modem |
| CVE-2026-24077 | 6.5 MEDIUM | Integer Underflow (Wrap or Wraparound) in WLAN Host |
IV. Related Vulnerabilities
Same product: Snapdragon
- CVE-2026-25292
Improper Validation of Syntactic Correctness of Input in Aut - CVE-2026-25289
Stack-based Buffer Overflow in WLAN Firmware - CVE-2026-25288
Buffer Over-read in WLAN Firmware - CVE-2026-24084
Insecure Security Identifier Mechanism in Multi-Mode Call Pr - CVE-2026-24083
Untrusted Pointer Dereference in Automotive Security
Same vendor: Qualcomm, Inc.
- CVE-2026-25292
Improper Validation of Syntactic Correctness of Input in Aut - CVE-2026-25289
Stack-based Buffer Overflow in WLAN Firmware - CVE-2026-25288
Buffer Over-read in WLAN Firmware - CVE-2026-24084
Insecure Security Identifier Mechanism in Multi-Mode Call Pr - CVE-2026-24083
Untrusted Pointer Dereference in Automotive Security
Same weakness: CWE-120
- CVE-2026-18103
Dhcp-server: dhcp-server: persistent denial of service due t - CVE-2026-45537
OpenSIPS: Global Buffer Overflow in construct_uri - CVE-2026-45100
OpenSIPS: Buffer Overflow in Base64 Encode Transformation - CVE-2026-15314
Authenticated Denial-of-Service Vulnerability in TP-Link Tap - CVE-2026-24076
Buffer Copy Without Checking Size of Input in Bluetooth HOST
V. Comments for CVE-2026-24080
No comments yet