CVE-2026-24076

Analyzed Analyzed - Analysis Complete

Memory Corruption in Qualcomm Registry Processing

Publication date: 2026-08-04

Last updated on: 2026-08-06

Assigner: Qualcomm, Inc.

Description

Memory Corruption when processing registry values with incorrect types using a direct query method.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-08-06

Generated

2026-08-24

AI Q&A

2026-08-04

EPSS Evaluated

2026-08-23

NVD

CVE-2026-24076

EUVD

EUVD-2026-52729

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	aqt1000_firmware	*
qualcomm	cologne_firmware	*
qualcomm	fastconnect_6200_firmware	*
qualcomm	fastconnect_6700_firmware	*
qualcomm	fastconnect_6800_firmware	*
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	qca0000_firmware	*
qualcomm	qca2062_firmware	*
qualcomm	qca2064_firmware	*
qualcomm	qca2065_firmware	*
qualcomm	qca2066_firmware	*
qualcomm	qca6391_firmware	*
qualcomm	qca6420_firmware	*
qualcomm	qca6430_firmware	*
qualcomm	qcm5430_firmware	*
qualcomm	qcm6490_firmware	*
qualcomm	video_collaboration_vc3_platform_firmware	*
qualcomm	sc8380xp_firmware	*
qualcomm	sm6250_firmware	*
qualcomm	snapdragon_7c_compute_platform_firmware	*
qualcomm	snapdragon_7c_gen_2_compute_platform_firmware	*
qualcomm	snapdragon_7c+_gen_3_compute_firmware	*
qualcomm	snapdragon_8c_compute_platform_firmware	*
qualcomm	snapdragon_8c_compute_platform_(sc8180xp-ad)_firmware	*
qualcomm	snapdragon_8cx_compute_platform_firmware	*
qualcomm	snapdragon_8cx_compute_platform_"poipu_pro"_firmware	*
qualcomm	snapdragon_8cx_gen_2_5g_compute_platform_firmware	*
qualcomm	snapdragon_8cx_gen_2_5g_compute_platform_"poipu_pro"_firmware	*
qualcomm	snapdragon_8cx_gen_3_compute_platform_firmware	*
qualcomm	wcd9340_firmware	*
qualcomm	wcd9341_firmware	*
qualcomm	wcd9370_firmware	*
qualcomm	wcd9375_firmware	*
qualcomm	wcd9378c_firmware	*
qualcomm	wcd9380_firmware	*
qualcomm	wcd9385_firmware	*
qualcomm	wsa8810_firmware	*
qualcomm	wsa8815_firmware	*
qualcomm	wsa8830_firmware	*
qualcomm	wsa8835_firmware	*
qualcomm	wsa8840_firmware	*
qualcomm	wsa8845_firmware	*
qualcomm	wsa8845h_firmware	*
qualcomm	x2000077_firmware	*
qualcomm	x2000086_firmware	*
qualcomm	x2000090_firmware	*
qualcomm	x2000092_firmware	*
qualcomm	x2000094_firmware	*
qualcomm	xg101002_firmware	*
qualcomm	xg101032_firmware	*
qualcomm	xg101039_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This vulnerability involves memory corruption when processing registry values with incorrect types using a direct query method. It can lead to unauthorized code execution or system crashes due to improper memory handling.

Impact Analysis

An attacker with local access could exploit this to escalate privileges, execute arbitrary code, or cause denial-of-service conditions on affected systems. It primarily impacts systems using Qualcomm components.

Compliance Impact

The vulnerability involves memory corruption due to incorrect registry value types, which could lead to unauthorized code execution or data exposure. This may impact compliance with GDPR by risking personal data breaches or HIPAA by compromising protected health information if exploited in relevant systems.

Mitigation Strategies

Apply vendor patches or updates for affected Qualcomm components. Disable direct registry query methods if not required. Monitor system logs for memory corruption indicators or unusual registry access patterns.

Hi! I’m here to help you understand CVE-2026-24076. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70