CVE-2026-24081
Analyzed
Analyzed - Analysis Complete
BaseFortify
Vulnerability report for CVE-2026-24081, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-17
Last updated on: 2026-09-22
Assigner: Qualcomm, Inc.
Description
Description
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| qualcomm | ar8035_firmware | * |
| qualcomm | c110100_firmware | * |
| qualcomm | cologne_firmware | * |
| qualcomm | cq7790_firmware | * |
| qualcomm | cq7790m_firmware | * |
| qualcomm | wcd9385_firmware | * |
| qualcomm | wcd9390_firmware | * |
| qualcomm | wcd9395_firmware | * |
| qualcomm | wcn3988_firmware | * |
| qualcomm | wcn6450_firmware | * |
| qualcomm | wcn6650_firmware | * |
| qualcomm | wcn6755_firmware | * |
| qualcomm | wcn7760_firmware | * |
| qualcomm | wcn7860_firmware | * |
| qualcomm | wcn7861_firmware | * |
| qualcomm | wcn7880_firmware | * |
| qualcomm | wcn7881_firmware | * |
| qualcomm | wcn8841_firmware | * |
| qualcomm | wsa8810_firmware | * |
| qualcomm | wsa8815_firmware | * |
| qualcomm | wsa8830_firmware | * |
| qualcomm | wsa8832_firmware | * |
| qualcomm | wsa8835_firmware | * |
| qualcomm | wsa8840_firmware | * |
| qualcomm | wsa8845_firmware | * |
| qualcomm | wsa8845h_firmware | * |
| qualcomm | wsa8850_firmware | * |
| qualcomm | wsa8850w_firmware | * |
| qualcomm | wsa8855c_firmware | * |
| qualcomm | x1e80100_firmware | * |
| qualcomm | xrv7209_firmware | * |
| qualcomm | xrv9209_firmware | * |
| qualcomm | cq8725s_firmware | * |
| qualcomm | cq8750m_firmware | * |
| qualcomm | cq8845s_firmware | * |
| qualcomm | fastconnect_6200_firmware | * |
| qualcomm | fastconnect_6700_firmware | * |
| qualcomm | fastconnect_6900_firmware | * |
| qualcomm | fastconnect_7800_firmware | * |
| qualcomm | fwa_gen_3_ultra_firmware | * |
| qualcomm | fwa_gen_5_elite_firmware | * |
| qualcomm | g2_gen_1_firmware | * |
| qualcomm | g3x_gen_2_firmware | * |
| qualcomm | iq-8275_firmware | * |
| qualcomm | iq-9075_firmware | * |
| qualcomm | iqx5121_firmware | * |
| qualcomm | iqx7181_firmware | * |
| qualcomm | kobuk_firmware | * |
| qualcomm | mbm715_firmware | * |
| qualcomm | milos_firmware | * |
| qualcomm | milos_iot_firmware | * |
| qualcomm | monaco_iot_firmware | * |
| qualcomm | netrani_firmware | * |
| qualcomm | orne_firmware | * |
| qualcomm | palawan25_firmware | * |
| qualcomm | pandeiro_firmware | * |
| qualcomm | q-7790_firmware | * |
| qualcomm | qca0000_firmware | * |
| qualcomm | qca6391_firmware | * |
| qualcomm | qca6698aq_firmware | * |
| qualcomm | qca8081_firmware | * |
| qualcomm | qca8337_firmware | * |
| qualcomm | qca8386_firmware | * |
| qualcomm | qcc2070_firmware | * |
| qualcomm | qcc2073_firmware | * |
| qualcomm | qcc2076_firmware | * |
| qualcomm | qcc5161_firmware | * |
| qualcomm | qcc6705_firmware | * |
| qualcomm | qcc710_firmware | * |
| qualcomm | qcc711_firmware | * |
| qualcomm | qcc7225_firmware | * |
| qualcomm | qcf8001_firmware | * |
| qualcomm | qcn6224_firmware | * |
| qualcomm | qcn6274_firmware | * |
| qualcomm | qcn9011_firmware | * |
| qualcomm | qcn9012_firmware | * |
| qualcomm | qcs6690_firmware | * |
| qualcomm | qcs8550_firmware | * |
| qualcomm | qfw7114_firmware | * |
| qualcomm | qfw7124_firmware | * |
| qualcomm | qln1083bd_firmware | * |
| qualcomm | qln1086bd_firmware | * |
| qualcomm | qmp1000_firmware | * |
| qualcomm | qmp2001_firmware | * |
| qualcomm | qpa1083bd_firmware | * |
| qualcomm | qpa1086bd_firmware | * |
| qualcomm | fastconnect_8800_mobile_connectivity_system_firmware | * |
| qualcomm | qxm1083_firmware | * |
| qualcomm | qxm1086_firmware | * |
| qualcomm | qxm1093_firmware | * |
| qualcomm | qxm1094_firmware | * |
| qualcomm | qxm1095_firmware | * |
| qualcomm | qxm1096_firmware | * |
| qualcomm | s3_gen_2_sound_platform_firmware | * |
| qualcomm | s3_sound_platform_firmware | * |
| qualcomm | s5_gen_2_sound_platform_firmware | * |
| qualcomm | s5_sound_platform_firmware | * |
| qualcomm | sar1165p_firmware | * |
| qualcomm | sar2130p_firmware | * |
| qualcomm | sc8380xp_firmware | * |
| qualcomm | sdx81_firmware | * |
| qualcomm | sm6450p_firmware | * |
| qualcomm | sm6475p_firmware | * |
| qualcomm | sm6475q_firmware | * |
| qualcomm | sm6650p_firmware | * |
| qualcomm | sm6850_firmware | * |
| qualcomm | sm7435_firmware | * |
| qualcomm | sm7435p_firmware | * |
| qualcomm | sm7525_firmware | * |
| qualcomm | sm7550_firmware | * |
| qualcomm | sm7550p_firmware | * |
| qualcomm | sm7635p_firmware | * |
| qualcomm | sm7675_firmware | * |
| qualcomm | sm7675p_firmware | * |
| qualcomm | sm7750p_firmware | * |
| qualcomm | sm8550p_firmware | * |
| qualcomm | sm8635_firmware | * |
| qualcomm | sm8635p_firmware | * |
| qualcomm | sm8650q_firmware | * |
| qualcomm | sm8735p_firmware | * |
| qualcomm | sm8750p_firmware | * |
| qualcomm | sm8845p_firmware | * |
| qualcomm | sm8950_firmware | * |
| qualcomm | sm8950p_firmware | * |
| qualcomm | snapdragon_6_gen_1_mobile_platform_firmware | * |
| qualcomm | snapdragon_6_gen_3_mobile_platform_firmware | * |
| qualcomm | snapdragon_6_gen_4_mobile_platform_firmware | * |
| qualcomm | snapdragon_7_gen_4_mobile_platform_firmware | * |
| qualcomm | snapdragon_7s_gen_3_mobile_platform_firmware | * |
| qualcomm | snapdragon_8_elite_firmware | * |
| qualcomm | snapdragon_8_elite_gen_5_firmware | * |
| qualcomm | snapdragon_8_gen_2_mobile_platform_firmware | * |
| qualcomm | snapdragon_8_gen_3_mobile_platform_firmware | * |
| qualcomm | snapdragon_8_gen_5_firmware | * |
| qualcomm | snapdragon_8+_gen_2_mobile_platform_firmware | * |
| qualcomm | snapdragon_ar1_gen_1_platform_firmware | * |
| qualcomm | snapdragon_ar1+_gen_1_platform_firmware | * |
| qualcomm | snapdragon_s7_sound_gen_1_platforms_firmware | * |
| qualcomm | snapdragon_x2_elite_firmware | * |
| qualcomm | snapdragon_x72_5g_modem-rf_system_firmware | * |
| qualcomm | snapdragon_x75_5g_modem-rf_system_firmware | * |
| qualcomm | snapdragon_reality_elite_platform_firmware | * |
| qualcomm | sw-only_firmware | * |
| qualcomm | sxr2230p_firmware | * |
| qualcomm | sxr2250p_firmware | * |
| qualcomm | wcd9340_firmware | * |
| qualcomm | wcd9370_firmware | * |
| qualcomm | wcd9371_firmware | * |
| qualcomm | wcd9375_firmware | * |
| qualcomm | wcd9378_firmware | * |
| qualcomm | wcd9378c_firmware | * |
| qualcomm | wcd9380_firmware | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-126 | The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer. |