CVE-2026-24079

Analyzed Analyzed - Analysis Complete

Cryptographic Issue in Qualcomm Chipset Firmware

Publication date: 2026-08-04

Last updated on: 2026-08-06

Assigner: Qualcomm, Inc.

Description

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-08-06

Generated

2026-08-25

AI Q&A

2026-08-04

EPSS Evaluated

2026-08-23

NVD

CVE-2026-24079

EUVD

EUVD-2026-52732

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	qcn9024_firmware	*
qualcomm	qcs2290_firmware	*
qualcomm	qcs4290_firmware	*
qualcomm	qcs4490_firmware	*
qualcomm	qcs8550_firmware	*
qualcomm	qep8111_firmware	*
qualcomm	qfw7114_firmware	*
qualcomm	qfw7124_firmware	*
qualcomm	qmp1000_firmware	*
qualcomm	video_collaboration_vc3_platform_firmware	*
qualcomm	robotics_rb2_platform_firmware	*
qualcomm	sd_8_gen1_5g_firmware	*
qualcomm	sd662_firmware	*
qualcomm	sdx61_firmware	*
qualcomm	sm6225p_firmware	*
qualcomm	sm6650p_firmware	*
qualcomm	sm7325p_firmware	*
qualcomm	sm7435_firmware	*
qualcomm	sm7550_firmware	*
qualcomm	sm7550p_firmware	*
qualcomm	sm7635p_firmware	*
qualcomm	sm7675_firmware	*
qualcomm	sm7675p_firmware	*
qualcomm	sm8475p_firmware	*
qualcomm	sm8550p_firmware	*
qualcomm	sm8635_firmware	*
qualcomm	sm8635p_firmware	*
qualcomm	sm8650q_firmware	*
qualcomm	sm8750p_firmware	*
qualcomm	snapdragon_4_gen_1_mobile_platform_firmware	*
qualcomm	snapdragon_4_gen_2_mobile_platform_firmware	*
qualcomm	snapdragon_460_mobile_platform_firmware	*
qualcomm	snapdragon_480_5g_mobile_platform_firmware	*
qualcomm	snapdragon_480+_5g_mobile_platform_firmware	*
qualcomm	snapdragon_6_gen_1_mobile_platform_firmware	*
qualcomm	snapdragon_6_gen_3_mobile_platform_firmware	*
qualcomm	snapdragon_6_gen_4_mobile_platform_firmware	*
qualcomm	snapdragon_662_mobile_platform_firmware	*
qualcomm	snapdragon_680_4g_mobile_platform_firmware	*
qualcomm	snapdragon_685_4g_mobile_platform_firmware	*
qualcomm	snapdragon_690_5g_mobile_platform_firmware	*
qualcomm	snapdragon_695_5g_mobile_platform_firmware	*
qualcomm	snapdragon_7_gen_1_mobile_platform_firmware	*
qualcomm	snapdragon_7+_gen_2_mobile_platform_firmware	*
qualcomm	snapdragon_778g_5g_mobile_platform_firmware	*
qualcomm	wcn3910_firmware	*
qualcomm	wcn3950_firmware	*
qualcomm	wcn3980_firmware	*
qualcomm	wcn3988_firmware	*
qualcomm	wcn6650_firmware	*
qualcomm	wcn6755_firmware	*
qualcomm	wcn7860_firmware	*
qualcomm	wcn7861_firmware	*
qualcomm	wcn7880_firmware	*
qualcomm	wcn7881_firmware	*
qualcomm	wsa8810_firmware	*
qualcomm	wsa8815_firmware	*
qualcomm	wsa8830_firmware	*
qualcomm	ar8035_firmware	*
qualcomm	csra6620_firmware	*
qualcomm	csra6640_firmware	*
qualcomm	fastconnect_6200_firmware	*
qualcomm	fastconnect_6700_firmware	*
qualcomm	snapdragon_778g+_5g_mobile_platform_firmware	*
qualcomm	snapdragon_782g_mobile_platform_firmware	*
qualcomm	wsa8832_firmware	*
qualcomm	wsa8835_firmware	*
qualcomm	wsa8840_firmware	*
qualcomm	wsa8845_firmware	*
qualcomm	wsa8845h_firmware	*
qualcomm	snapdragon_7c+_gen_3_compute_firmware	*
qualcomm	snapdragon_7s_gen_3_mobile_platform_firmware	*
qualcomm	snapdragon_8_elite_firmware	*
qualcomm	snapdragon_8_gen_1_mobile_platform_firmware	*
qualcomm	snapdragon_8_gen_2_mobile_platform_firmware	*
qualcomm	snapdragon_8_gen_3_mobile_platform_firmware	*
qualcomm	snapdragon_8+_gen_1_mobile_platform_firmware	*
qualcomm	snapdragon_8+_gen_2_mobile_platform_firmware	*
qualcomm	snapdragon_865_5g_mobile_platform_firmware	*
qualcomm	snapdragon_865+_5g_mobile_platform_firmware	*
qualcomm	snapdragon_870_5g_mobile_platform_firmware	*
qualcomm	snapdragon_888_5g_mobile_platform_firmware	*
qualcomm	snapdragon_888+_5g_mobile_platform_firmware	*
qualcomm	snapdragon_auto_5g_modem-rf_firmware	*
qualcomm	snapdragon_auto_5g_modem-rf_gen_2_firmware	*
qualcomm	snapdragon_w5+_gen_1_wearable_platform_firmware	*
qualcomm	snapdragon_x32_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_x35_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_x53_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_x55_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_x65_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_x72_5g_modem-rf_system_firmware	*
qualcomm	snapdragon_x75_5g_modem-rf_system_firmware	*
qualcomm	sw5100_firmware	*
qualcomm	sw5100p_firmware	*
qualcomm	sw6100_firmware	*
qualcomm	sw6100p_firmware	*
qualcomm	themisto_firmware	*
qualcomm	wcd9335_firmware	*
qualcomm	wcd9340_firmware	*
qualcomm	wcd9370_firmware	*
qualcomm	wcd9371_firmware	*
qualcomm	wcd9375_firmware	*
qualcomm	wcd9378_firmware	*
qualcomm	wcd9380_firmware	*
qualcomm	wcd9385_firmware	*
qualcomm	wcd9390_firmware	*
qualcomm	wcd9395_firmware	*
qualcomm	fastconnect_6800_firmware	*
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	fsm200_platform_firmware	*
qualcomm	fsm20055_firmware	*
qualcomm	fwa_gen_3_ultra_firmware	*
qualcomm	g1_gen_1_firmware	*
qualcomm	milos_firmware	*
qualcomm	netrani_firmware	*
qualcomm	orne_firmware	*
qualcomm	palawan25_firmware	*
qualcomm	qca6174a_firmware	*
qualcomm	qca6391_firmware	*
qualcomm	qca6574au_firmware	*
qualcomm	qca6584au_firmware	*
qualcomm	qca6595au_firmware	*
qualcomm	qca6678aq_firmware	*
qualcomm	qca6688aq_firmware	*
qualcomm	qca6696_firmware	*
qualcomm	qca6698aq_firmware	*
qualcomm	qca6698au_firmware	*
qualcomm	qca6797aq_firmware	*
qualcomm	qca8081_firmware	*
qualcomm	qca8337_firmware	*
qualcomm	qcc710_firmware	*
qualcomm	qcm2290_firmware	*
qualcomm	qcm4325_firmware	*
qualcomm	qcm4490_firmware	*
qualcomm	qcm5430_firmware	*
qualcomm	qcm6490_firmware	*
qualcomm	qcn6024_firmware	*
qualcomm	qcn6224_firmware	*
qualcomm	qcn6274_firmware	*
qualcomm	qcn9011_firmware	*
qualcomm	qcn9012_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This vulnerability involves a cryptographic issue that occurs when processing registration requests with missing or malformed authentication parameters. This could allow unauthorized access or manipulation of sensitive data during registration.

Detection Guidance

Detection of this vulnerability requires monitoring for improper handling of registration requests with missing or malformed authentication parameters. Inspect network traffic for unencrypted or weakly encrypted registration exchanges. Check system logs for failed authentication attempts during registration processes.

Impact Analysis

The vulnerability may lead to unauthorized access to systems or data, potential data breaches, or compromise of user accounts. Attackers could exploit weak authentication to impersonate users or gain elevated privileges.

Compliance Impact

This vulnerability could result in non-compliance with GDPR, HIPAA, or other regulations due to unauthorized data access or breaches. Organizations may face legal penalties, reputational damage, and loss of trust.

Mitigation Strategies

Implement strict input validation for registration requests to ensure authentication parameters are present and correctly formatted. Monitor network traffic for malformed requests targeting registration endpoints.

Hi! I’m here to help you understand CVE-2026-24079. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70