CVE-2026-24084 Insecure Security Identifier Mechanism in Multi-Mode Call Processor
Attackers can bypass security checks in Qualcomm Snapdragon chipsets by exploiting inconsistent security capability verification during call processing.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-24084?
CVE-2026-24084 is a high-severity vulnerability in Qualcomm Aqt1000 Firmware, published on 4 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.
Weakness: CWE-1294
Which versions are affected by CVE-2026-24084?
It affects 128 products.
Products include Qualcomm 5g Fixed Wireless Access Platform Firmware, Qualcomm Aqt1000 Firmware, Qualcomm Ar8035 Firmware, Qualcomm Fastconnect 6200 Firmware, Qualcomm Fastconnect 6700 Firmware, Qualcomm Fastconnect 6800 Firmware and 122 more.
How do I fix CVE-2026-24084?
No fix has been published for CVE-2026-24084 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-24084 being exploited?
There is no known exploitation of CVE-2026-24084 in the wild and no public exploit code.
Other vulnerabilities in Qualcomm Aqt1000 Firmware
Sources
Also known as GHSA-7wmw-jvfp-wgm7.