CVE-2026-24077

Analyzed Analyzed - Analysis Complete

Information Disclosure in Qualcomm Wireless Network Channel Switch Processing

Publication date: 2026-08-04

Last updated on: 2026-08-06

Assigner: Qualcomm, Inc.

Description

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-08-06

Generated

2026-08-24

AI Q&A

2026-08-04

EPSS Evaluated

2026-08-23

NVD

CVE-2026-24077

EUVD

EUVD-2026-52730

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	aqt1000_firmware	*
qualcomm	ar8035_firmware	*
qualcomm	csra6620_firmware	*
qualcomm	csra6640_firmware	*
qualcomm	fastconnect_6200_firmware	*
qualcomm	wcd9395_firmware	*
qualcomm	wcn3910_firmware	*
qualcomm	wcn3950_firmware	*
qualcomm	wcn3980_firmware	*
qualcomm	wcn3988_firmware	*
qualcomm	wcn6650_firmware	*
qualcomm	wcn6755_firmware	*
qualcomm	wcn7860_firmware	*
qualcomm	wcn7861_firmware	*
qualcomm	wcn7880_firmware	*
qualcomm	wcn7881_firmware	*
qualcomm	wsa8810_firmware	*
qualcomm	wsa8815_firmware	*
qualcomm	wsa8830_firmware	*
qualcomm	wsa8832_firmware	*
qualcomm	wsa8835_firmware	*
qualcomm	wsa8840_firmware	*
qualcomm	wsa8845_firmware	*
qualcomm	wsa8845h_firmware	*
qualcomm	fastconnect_6700_firmware	*
qualcomm	fastconnect_6800_firmware	*
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	flight_rb5_5g_platform_firmware	*
qualcomm	fwa_gen_3_ultra_firmware	*
qualcomm	g1_gen_1_firmware	*
qualcomm	g2_gen_1_firmware	*
qualcomm	milos_firmware	*
qualcomm	netrani_firmware	*
qualcomm	orne_firmware	*
qualcomm	palawan25_firmware	*
qualcomm	qca6391_firmware	*
qualcomm	qca6420_firmware	*
qualcomm	qca6430_firmware	*
qualcomm	qca6574_firmware	*
qualcomm	qca6574a_firmware	*
qualcomm	qca6574au_firmware	*
qualcomm	qca6595au_firmware	*
qualcomm	qca6696_firmware	*
qualcomm	qca6777aq_firmware	*
qualcomm	qca6787aq_firmware	*
qualcomm	qca6797aq_firmware	*
qualcomm	qca8081_firmware	*
qualcomm	qca8337_firmware	*
qualcomm	qcc710_firmware	*
qualcomm	qcm2290_firmware	*
qualcomm	qcm4325_firmware	*
qualcomm	qcm4490_firmware	*
qualcomm	qcm5430_firmware	*
qualcomm	qcm6490_firmware	*
qualcomm	qcn6224_firmware	*
qualcomm	qcn6274_firmware	*
qualcomm	qcn9011_firmware	*
qualcomm	qcn9012_firmware	*
qualcomm	qcs2290_firmware	*
qualcomm	qcs4290_firmware	*
qualcomm	qcs4490_firmware	*
qualcomm	qfw7114_firmware	*
qualcomm	qfw7124_firmware	*
qualcomm	qmp1000_firmware	*
qualcomm	qrb5165m_firmware	*
qualcomm	qrb5165n_firmware	*
qualcomm	video_collaboration_vc3_platform_firmware	*
qualcomm	video_collaboration_vc5_platform_firmware	*
qualcomm	robotics_rb2_platform_firmware	*
qualcomm	robotics_rb5_platform_firmware	*
qualcomm	sa6155p_firmware	*
qualcomm	sa8155_firmware	*
qualcomm	sa8155p_firmware	*
qualcomm	sa8195p_firmware	*
qualcomm	sd_8_gen1_5g_firmware	*
qualcomm	sd662_firmware	*
qualcomm	sd865_5g_firmware	*
qualcomm	sm6225p_firmware	*
qualcomm	sm6650p_firmware	*
qualcomm	sm7325p_firmware	*
qualcomm	sm7435_firmware	*
qualcomm	sm7635p_firmware	*
qualcomm	sm7675_firmware	*
qualcomm	sm7675p_firmware	*
qualcomm	sm8475p_firmware	*
qualcomm	sm8635_firmware	*
qualcomm	sm8635p_firmware	*
qualcomm	sm8650q_firmware	*
qualcomm	sm8750p_firmware	*
qualcomm	snapdragon_4_gen_1_mobile_platform_firmware	*
qualcomm	snapdragon_4_gen_2_mobile_platform_firmware	*
qualcomm	snapdragon_460_mobile_platform_firmware	*
qualcomm	snapdragon_480_5g_mobile_platform_firmware	*
qualcomm	snapdragon_480+_5g_mobile_platform_firmware	*
qualcomm	snapdragon_6_gen_1_mobile_platform_firmware	*
qualcomm	snapdragon_6_gen_3_mobile_platform_firmware	*
qualcomm	snapdragon_6_gen_4_mobile_platform_firmware	*
qualcomm	snapdragon_662_mobile_platform_firmware	*
qualcomm	snapdragon_680_4g_mobile_platform_firmware	*
qualcomm	snapdragon_685_4g_mobile_platform_firmware	*
qualcomm	snapdragon_690_5g_mobile_platform_firmware	*
qualcomm	snapdragon_695_5g_mobile_platform_firmware	*
qualcomm	snapdragon_7_gen_1_mobile_platform_firmware	*
qualcomm	snapdragon_7+_gen_2_mobile_platform_firmware	*
qualcomm	snapdragon_778g_5g_mobile_platform_firmware	*
qualcomm	snapdragon_778g+_5g_mobile_platform_firmware	*
qualcomm	snapdragon_782g_mobile_platform_firmware	*
qualcomm	snapdragon_7c+_gen_3_compute_firmware	*
qualcomm	snapdragon_7s_gen_3_mobile_platform_firmware	*
qualcomm	snapdragon_8_elite_firmware	*
qualcomm	snapdragon_8_gen_1_mobile_platform_firmware	*
qualcomm	snapdragon_8_gen_3_mobile_platform_firmware	*
qualcomm	snapdragon_8+_gen_1_mobile_platform_firmware	*
qualcomm	snapdragon_865_5g_mobile_platform_firmware	*
qualcomm	snapdragon_865+_5g_mobile_platform_firmware	*
qualcomm	snapdragon_870_5g_mobile_platform_firmware	*
qualcomm	snapdragon_888_5g_mobile_platform_firmware	*
qualcomm	snapdragon_888+_5g_mobile_platform_firmware	*
qualcomm	snapdragon_8c_compute_platform_firmware	*
qualcomm	snapdragon_8c_compute_platform_(sc8180xp-ad)_firmware	*
qualcomm	snapdragon_8cx_compute_platform_firmware	*
qualcomm	snapdragon_8cx_compute_platform_"poipu_pro"_firmware	*
qualcomm	snapdragon_8cx_gen_2_5g_compute_platform_firmware	*
qualcomm	snapdragon_8cx_gen_2_5g_compute_platform_"poipu_pro"_firmware	*
qualcomm	snapdragon_8cx_gen_3_compute_platform_firmware	*
qualcomm	snapdragon_w5+_gen_1_wearable_platform_firmware	*
qualcomm	snapdragon_x53_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_x55_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_x72_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_x75_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_xr2_5g_platform_firmware	*
qualcomm	snapdragon_xr2+_gen_1_platform_firmware	*
qualcomm	sw5100_firmware	*
qualcomm	sw5100p_firmware	*
qualcomm	wcd9335_firmware	*
qualcomm	wcd9340_firmware	*
qualcomm	wcd9341_firmware	*
qualcomm	wcd9370_firmware	*
qualcomm	wcd9375_firmware	*
qualcomm	wcd9378_firmware	*
qualcomm	wcd9380_firmware	*
qualcomm	wcd9385_firmware	*
qualcomm	wcd9390_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-191	The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Attack-Flow Graph

Executive Summary

This vulnerability involves information disclosure when processing wireless network channel switch data with incorrectly formatted length fields. It allows unauthorized access to sensitive information during wireless network operations.

Detection Guidance

This vulnerability involves improperly formatted length fields in wireless network channel switch information. Detection requires monitoring wireless network traffic for malformed channel switch frames or unexpected length values in management frames. Use tools like Wireshark to capture and analyze wireless traffic, filtering for 802.11 management frames with unusual length fields. Check for inconsistencies in channel switch announcements or beacon frames that may indicate exploitation attempts.

Impact Analysis

An attacker within wireless network range could exploit this to disclose confidential data transmitted during channel switching, potentially exposing sensitive information like credentials or user activity.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, violating GDPR's data protection principles and HIPAA's confidentiality requirements, potentially resulting in legal penalties or compliance failures.

Mitigation Strategies

Apply vendor patches or updates for wireless network components. Monitor Qualcomm security advisories for firmware updates. Disable unnecessary wireless network features if patches are unavailable.

Hi! I’m here to help you understand CVE-2026-24077. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70