Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2026-24075

Buffer Over-read in Qualcomm IPC

High7.8EPSS 0.09%
Published
Updated
Reserved
Assigned by
qualcomm

Description

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

Timeline

  1. ID reserved

    By qualcomm

  2. · 8 months later

    Published

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2026-24075, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Analyzed3.1High7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.09% · top 100% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected AQT1000
    • affected Cologne
    • affected FastConnect 6200
    • affected FastConnect 6700
    • affected FastConnect 6800
    • affected FastConnect 6900
    • affected FastConnect 7800
    • affected IQX5121
    • affected IQX7181
    • affected QCA0000
    • affected QCA6391
    • affected QCA6420
    • affected QCA6430
    • affected QCM5430
    • affected QCM6490
    • affected Qualcomm Video Collaboration VC3 Platform
    • affected SC8380XP
    • affected SM6250
    • affected Snapdragon 7c Compute Platform
    • affected Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"
    • affected Snapdragon 7c+ Gen 3 Compute
    • affected Snapdragon 8c Compute Platform "Poipu Lite"
    • affected Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
    • affected Snapdragon 8cx Compute Platform
    • affected Snapdragon 8cx Compute Platform "Poipu Pro"
    • affected Snapdragon 8cx Gen 2 5G Compute Platform
    • affected Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"
    • affected Snapdragon 8cx Gen 3 Compute Platform
    • affected Snapdragon X2 Elite
    • affected WCD9340
    • affected WCD9341
    • affected WCD9370
    • affected WCD9375
    • affected WCD9378C
    • affected WCD9380
    • affected WCD9385
    • affected WSA8810
    • affected WSA8815
    • affected WSA8830
    • affected WSA8835
    • and 3 more

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2026-24075 badge
[![CVE-2026-24075](https://trackcve.app/badge/CVE-2026-24075.svg)](https://trackcve.app/cve/CVE-2026-24075)

Record last updated .