CVE-2026-24081— Buffer Over-read in BT Controller

Quick assessment

Affected

Qualcomm, Inc. Snapdragon

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在处理信道图时，如果已使用的信道数量不足且完全启用了自适应频率跳变，可能会引发瞬时拒绝服务（Transient DOS）。

CVSS 7.4 · High EPSS 0.16% · P5 Updated Sep 17, 2026

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 152

Vendor	Product	Version Range	Status
Qualcomm, Inc.	Snapdragon	`AR8035`	affected
		`C110100`	affected
		`Cologne`	affected
		`CQ7790`	affected
		`CQ7790M`	affected
		`CQ8725S`	affected
		`CQ8750M`	affected
		`CQ8845S`	affected
… +144 more rows

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Buffer Over-read in BT Controller

Source: CVE Program / CVE List V5

Vulnerability Description

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

缓冲区上溢读取

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Qualcomm, Inc.	Snapdragon	AR8035	-

II. Public POCs for CVE-2026-24081

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-24081

请登录查看更多情报信息。

https://www.cve.org/CVERecord?id=CVE-2026-24081

Same Patch Batch · Qualcomm, Inc. · 2026-09-17 · 15 CVEs total

CVE-2026-25283	8.8 HIGH	Stack-based Buffer Overflow in OOBM
CVE-2026-25282	7.9 HIGH	Out-of-bounds Read in OOBM
CVE-2025-59607	7.8 HIGH	Untrusted Pointer Dereference in Windows Compute
CVE-2026-24073	7.8 HIGH	Out-of-bounds Write in Video
CVE-2026-24074	7.8 HIGH	Out-of-bounds Write in Video
CVE-2026-24075	7.8 HIGH	Buffer Over-read in Qualcomm IPC
CVE-2026-25278	7.8 HIGH	Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on
CVE-2026-25280	7.8 HIGH	Out-of-bounds Write in DSP Service
CVE-2026-25290	7.8 HIGH	Integer Overflow or Wraparound in OOBM
CVE-2026-25275	7.5 HIGH	Buffer Over-read in WLAN Firmware
CVE-2026-25281	7.4 HIGH	Allocation of Resources Without Limits or Throttling in OOBM
CVE-2026-25294	7.4 HIGH	Buffer Over-read in WLAN Firmware
CVE-2026-25284	7.3 HIGH	Buffer Over-read in OOBM
CVE-2026-25261	6.7 MEDIUM	Untrusted Pointer Dereference in Camera

IV. Related Vulnerabilities

Same product: Snapdragon

Same vendor: Qualcomm, Inc.

Same weakness: CWE-126