CVE-2026-24080

Analyzed Analyzed - Analysis Complete

Memory Corruption in Qualcomm Fingerprint Trusted Application

Publication date: 2026-08-04

Last updated on: 2026-08-06

Assigner: Qualcomm, Inc.

Description

Memory Corruption when handling malformed request parameters in the fingerprint TA.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-08-06

Generated

2026-08-24

AI Q&A

2026-08-04

EPSS Evaluated

2026-08-23

NVD

CVE-2026-24080

EUVD

EUVD-2026-52733

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	qam8295p_firmware	*
qualcomm	qca6574au_firmware	*
qualcomm	qca6595au_firmware	*
qualcomm	qca6678aq_firmware	*
qualcomm	qca6696_firmware	*
qualcomm	sa6145p_firmware	*
qualcomm	sa6150p_firmware	*
qualcomm	sa6155p_firmware	*
qualcomm	sa8145p_firmware	*
qualcomm	sa8150p_firmware	*
qualcomm	sa8155p_firmware	*
qualcomm	sa8195p_firmware	*
qualcomm	sa8255p_firmware	*
qualcomm	sa8295p_firmware	*
qualcomm	sa8540p_firmware	*
qualcomm	sa9000p_firmware	*
qualcomm	sw6100_firmware	*
qualcomm	sw6100p_firmware	*
qualcomm	themisto_firmware	*
qualcomm	wcd9378c_firmware	*
qualcomm	wsa8840_firmware	*
qualcomm	wsa8845_firmware	*
qualcomm	wsa8845h_firmware	*
qualcomm	x2000077_firmware	*
qualcomm	x2000086_firmware	*
qualcomm	x2000090_firmware	*
qualcomm	x2000092_firmware	*
qualcomm	x2000094_firmware	*
qualcomm	xg101002_firmware	*
qualcomm	xg101032_firmware	*
qualcomm	xg101039_firmware	*
qualcomm	cologne_firmware	*
qualcomm	fastconnect_6700_firmware	*
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	qam8255p_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory corruption issue that occurs when the fingerprint Trusted Application (TA) processes malformed request parameters. It can lead to unauthorized code execution or system crashes due to improper memory handling.

Impact Analysis

An attacker could exploit this to gain elevated privileges, access sensitive data, or cause denial-of-service conditions on affected devices using the Qualcomm fingerprint TA.

Compliance Impact

This vulnerability involves memory corruption due to malformed request parameters in the fingerprint TA, which could lead to unauthorized code execution or data exposure. Such issues may violate compliance requirements under GDPR (data protection) or HIPAA (health data security) if exploited to access sensitive biometric or personal data.

Mitigation Strategies

Apply security patches or updates provided by Qualcomm for the fingerprint TA component. Disable or restrict access to the vulnerable component if patches are unavailable. Monitor vendor advisories for further guidance.

Hi! I’m here to help you understand CVE-2026-24080. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70