Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-24082— Use After Free in Automotive GPU

Quick assessment

Affected

Qualcomm, Inc. Snapdragon

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Qualcomm Chipsets是美国高通（Qualcomm）公司的一系列芯片组。 Qualcomm Chipsets存在资源管理错误漏洞，该漏洞源于在执行性能计数器取消选择操作时，从已释放的源复制数据导致内存损坏。

CVSS 7.8 · High EPSS 0.07% · P0 Updated May 05, 2026

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

Affected Version Matrix 176

Vendor	Product	Version Range	Status
Qualcomm, Inc.	Snapdragon	`AR8031`	affected
		`AR8035`	affected
		`CSRA6620`	affected
		`CSRA6640`	affected
		`FastConnect 6200`	affected
		`FastConnect 6700`	affected
		`FastConnect 6900`	affected
		`FastConnect 7800`	affected
… +168 more rows

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-24082

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Use After Free in Automotive GPU

Source: CVE Program / CVE List V5

Vulnerability Description

Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

释放后使用

Source: CVE Program / CVE List V5

Vulnerability Title

Qualcomm Chipsets 资源管理错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Qualcomm, Inc.	Snapdragon	AR8031	-

II. Public POCs for CVE-2026-24082

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-24082

请登录查看更多情报信息。

https://www.cve.org/CVERecord?id=CVE-2026-24082

Same Patch Batch · Qualcomm, Inc. · 2026-05-04 · 10 CVEs total

CVE-2026-25293	9.6 CRITICAL	Incorrect authorization in PLC FW
CVE-2025-47408	7.8 HIGH	Untrusted Pointer Dereference in Power Optimization Firmware
CVE-2025-47407	7.8 HIGH	Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
CVE-2025-47405	7.8 HIGH	Untrusted Pointer Dereference in Camera
CVE-2025-47404	6.5 MEDIUM	Buffer Copy Without Checking Size of Input in Automotive Audio
CVE-2025-47403	6.5 MEDIUM	Buffer Over-read in WLAN Firmware
CVE-2025-47401	6.5 MEDIUM	Buffer Over-read in WLAN HAL
CVE-2025-47406	6.1 MEDIUM	Buffer Over-read in DSP Service
CVE-2026-25266	5.5 MEDIUM	Exposed dangerous function in windows host

IV. Related Vulnerabilities

Same product: Snapdragon

Same vendor: Qualcomm, Inc.

Same weakness: CWE-416