CVE-2026-24087 Improper Validation of Syntactic Correctness of Input in Kernel
Memory corruption in Qualcomm Snapdragon kernel allows attackers to execute arbitrary code or escalate privileges via fastboot OEM commands.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-24087?
CVE-2026-24087 is a high-severity memory corruption vulnerability in Qualcomm Ar8031 Firmware, published on 1 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Memory corruption while processing fastboot OEM commands.
Weakness: CWE-1286
Which versions are affected by CVE-2026-24087?
It affects 215 products.
Products include Qualcomm Ar8031 Firmware, Qualcomm Ar8035 Firmware, Qualcomm Cologne Firmware, Qualcomm Cq7790 Firmware, Qualcomm Cq8725s Firmware, Qualcomm Cq8750m Firmware and 209 more.
How do I fix CVE-2026-24087?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-24087 being exploited?
There is no known exploitation of CVE-2026-24087 in the wild and no public exploit code.
Other vulnerabilities in Qualcomm Ar8031 Firmware
- CVE-2025-27038 Qualcomm Multiple Chipsets Use-After-Free
- CVE-2022-25729 Improper Input Validation in MODEM
- CVE-2022-25727 Memory corruption in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
- CVE-2021-30285 Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
- CVE-2021-30275 Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Sources
Also known as 4409501, A-510336694, ASB-A-510336694, GHSA-mx7q-4r64-vqpj.