CVE-2026-24073

EUVD-2026-81320
Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 0.96%
Affected Products (NVD)
VendorProductVersion
qualcommcologne_firmware
-
qualcommfastconnect_6900_firmware
-
qualcommfastconnect_7800_firmware
-
qualcommiqx5121_firmware
-
qualcommiqx7181_firmware
-
qualcommqca0000_firmware
-
qualcommsc8380xp_firmware
-
qualcommsnapdragon_x2_elite_firmware
-
qualcommwcd9378c_firmware
-
qualcommwcd9380_firmware
-
qualcommwcd9385_firmware
-
qualcommwsa8840_firmware
-
qualcommwsa8845_firmware
-
qualcommwsa8845h_firmware
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.html