CVE-2026-24083
Received Received - Intake

Memory Corruption in Qualcomm Device Driver

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: Qualcomm, Inc.

Description
Memory Corruption while processing IOCTL device driver requests with invalid arguments.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-24083
EUVD
EUVD-2026-52734

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-822 The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory corruption vulnerability that occurs when the system processes IOCTL (Input/Output Control) requests sent to a device driver with invalid arguments. IOCTL is used for communication between user space and kernel space, and improper handling of these requests can lead to memory corruption.

Impact Analysis

An attacker could exploit this to execute arbitrary code, escalate privileges, or cause system crashes. Since the vulnerability affects device drivers, it may allow unauthorized access to sensitive data or control over the system, depending on the driver's role.

Mitigation Strategies

Apply vendor patches or updates for the affected device driver. Disable or restrict access to the vulnerable IOCTL interface if patches are unavailable. Monitor Qualcomm security advisories for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-24083. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart