Vulnerability-Lookup

BDU:2026-16244 (CVE-2026-24088)

Vulnerability from fstec – Published: 2026-10-13 – Updated: 2026-10-13 – View on bdu.fstec.ru Exploit publicly available Fixed

Title

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm, связанная с отсутствием аутентификации для критичной функции, позволяющая нарушителю производить запись произвольных файлов

Summary

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm связана с отсутствием аутентификации для критичной функции. Эксплуатация уязвимости может позволить нарушителю производить запись произвольных файлов

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:C/A:C

8.2 (High) CVSS 3.1


                      
                        CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Authentication bypass

Incidents

Being clarified

Remediation

Software update

CWE

CWE-306 - Отсутствие аутентификации для критичной функции

Aliases

CVE-2026-24088

References

2 references

URL
https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bu…
https://github.com/aniketlab/POCO-M7-Plus-Jailbreak

Impacted products

246 products from 1 vendor

Vendors

Qualcomm Technologies Inc.

Products

IPQ4019, IPQ8064, QCA9980, SD 8 Gen1 5G, WCD9380, WSA8830, WSA8835, SD662, SM8475P, WCD9371, QCA7500, Snapdragon W5+ Gen 1 Wearable Platform, Snapdragon XR2 5G Platform, Snapdragon 8 Gen 1 Mobile Platform, Snapdragon 4 Gen 1 Mobile Platform, Snapdragon 460 Mobile Platform, Snapdragon 480 5G Mobile Platform, Snapdragon 662 Mobile Platform, Snapdragon 680 4G Mobile Platform, Snapdragon 695 5G Mobile Platform, Snapdragon 8+ Gen 1 Mobile Platform, Snapdragon XR2+ Gen 1 Platform, Snapdragon 8 Gen 2 Mobile Platform, Snapdragon 8+ Gen 2 Mobile Platform, Immersive Home 214 Platform, Immersive Home 216 Platform, Immersive Home 316 Platform, Immersive Home 318 Platform, IPQ5010, IPQ8076, IPQ8078, QCA9889, QCN5024, QCN5124, QCN5154, QCN5164, QCN9100, SA8770P, AR9380, IPQ8065, IPQ8068, QCA6564AU, QCA6574A, QCA6574AU, QCA9886, QCA9888, QCA9985, QCA9990, QCA9992, QCA9994, QCN9022, IPQ8070, SD626, Snapdragon 8 Gen 3 Mobile Platform, Snapdragon X35 5G Modem-RF System, Snapdragon X5 LTE Modem, IPQ4018, IPQ4028, IPQ4029, QCA9880, QCA9898, SA7775P, SA8620P, SRV1H, SRV1M, SXR2250P, SM8750P, WCN7860, WCN7861, WCN7880, WCN7881, FastConnect 6700, FastConnect 6900, FastConnect 7800, WCD9370, WCD9390, WCD9395, WCN3950, WSA8810, WSA8815, WSA8832, WSA8840, WSA8845, WSA8845H, CSR8811, IPQ6010, IPQ6018, QAM8255P, QAM8295P, QAMSRV1H, QAMSRV1M, QCA4024, QCA6595, QCA6595AU, QCA6696, QCA6698AQ, QCA6797AQ, QCA8075, QCA8081, QCM5430, QCM6490, QCN5022, QCN5052, QCN5122, QCN5152, QCN6023, QCN6024, QCN9000, QCN9012, QCN9024, QCN9070, SA7255P, SA8255P, SA8295P, SA9000P, SM7675, SM7675P, SM8550P, SM8635, SM8635P, SXR2230P, SXR2330P, WCD9340, WCD9375, WCD9378, WCD9385, WCN3980, WCN3988, WCN6450, WCN6650, WCN6755, Snapdragon AR1 Gen 1 Platform, SM6650P, SM8650Q, QMP1000, Snapdragon X32 5G Modem-RF System, SM7435, SM7635P, FastConnect 6200, QCA6174A, QCA6391, QCM2290, QCM4325, QCM6125, QCN9011, QCS2290, QCS4290, QEP8111, SC8380XP, SD865 5G, Snapdragon 4 Gen 2 Mobile Platform, Snapdragon 625 Mobile Platform, Snapdragon 626 Mobile Platform, SW5100, SW5100P, WCD9326, WCN3615, WCN3660B, WCN3680B, WCN3910, QCA9984, Snapdragon 820 Automotive Platform, QCA6564A, QCA9377, QCA8695AU, SXR2350P, MDM9628, QCA9367, SM7550, SM7550P, Snapdragon 6 Gen 1 Mobile Platform, QCS6690, Snapdragon 7 Gen 1 Mobile Platform, Snapdragon 7+ Gen 2 Mobile Platform, G1 Gen 1, G2 Gen 1, IQ9 Series Platform, LeMans_AU_LGIT, LeMansAU, Milos, Netrani, Orne, Palawan25, Pandeiro, QLN1083BD, QLN1086BD, QPA1083BD, QPA1086BD, Qualcomm 215 Mobile Platform, QXM1093, QXM1094, QXM1095, QXM1096, SAR2130P, SM6225P, Smart Display 200 Platform, Snapdragon 480+ 5G Mobile Platform, Snapdragon 6 Gen 3 Mobile Platform, Snapdragon 6 Gen 4 Mobile Platform, Snapdragon 685 4G Mobile Platform, Snapdragon 7s Gen 3 Mobile Platform, Snapdragon 8 Elite, Snapdragon 8 Elite Gen 5, Themisto, Vision Intelligence 100 Platform, Vision Intelligence 200 Platform, QAM8397P, Networking Pro 1200 Platform, Networking Pro 1210 Platform, Networking Pro 1610 Platform, Networking Pro 400 Platform, Networking Pro 600 Platform, Networking Pro 610 Platform, Networking Pro 800 Platform, Networking Pro 810 Platform, XRV7209, XRV9209, G3x Gen 2, Milos_IOT, Molokai, QMB715, QMP2001, SM6450P, SM6475P, SM6475Q, SM6850, SM7435P, SM7525, SM8735P, SM8845P, Snapdragon 7 Gen 4 Mobile Platform, WCN7760, WSA8850, WSA8850W, WSA8855C, X1E80100, QCM8838, SDR753, Kalpeni, Snapdragon Wear Elite platform, QAM8797P, Qualcomm Video Collaboration VC1 Platform, Qualcomm Video Collaboration VC3 Platform, Qualcomm Video Collaboration VC5 Platform, SM4850, SM4850P

Versions

- (IPQ4019), - (IPQ8064), - (QCA9980), - (SD 8 Gen1 5G), - (WCD9380), - (WSA8830), - (WSA8835), - (SD662), - (SM8475P), - (WCD9371), - (QCA7500), - (Snapdragon W5+ Gen 1 Wearable Platform), - (Snapdragon XR2 5G Platform), - (Snapdragon 8 Gen 1 Mobile Platform), - (Snapdragon 4 Gen 1 Mobile Platform), - (Snapdragon 460 Mobile Platform), - (Snapdragon 480 5G Mobile Platform), - (Snapdragon 662 Mobile Platform), - (Snapdragon 680 4G Mobile Platform), - (Snapdragon 695 5G Mobile Platform), - (Snapdragon 8+ Gen 1 Mobile Platform), - (Snapdragon XR2+ Gen 1 Platform), - (Snapdragon 8 Gen 2 Mobile Platform), - (Snapdragon 8+ Gen 2 Mobile Platform), - (Immersive Home 214 Platform), - (Immersive Home 216 Platform), - (Immersive Home 316 Platform), - (Immersive Home 318 Platform), - (IPQ5010), - (IPQ8076), - (IPQ8078), - (QCA9889), - (QCN5024), - (QCN5124), - (QCN5154), - (QCN5164), - (QCN9100), - (SA8770P), - (AR9380), - (IPQ8065), - (IPQ8068), - (QCA6564AU), - (QCA6574A), - (QCA6574AU), - (QCA9886), - (QCA9888), - (QCA9985), - (QCA9990), - (QCA9992), - (QCA9994), - (QCN9022), - (IPQ8070), - (SD626), - (Snapdragon 8 Gen 3 Mobile Platform), - (Snapdragon X35 5G Modem-RF System), - (Snapdragon X5 LTE Modem), - (IPQ4018), - (IPQ4028), - (IPQ4029), - (QCA9880), - (QCA9898), - (SA7775P), - (SA8620P), - (SRV1H), - (SRV1M), - (SXR2250P), - (SM8750P), - (WCN7860), - (WCN7861), - (WCN7880), - (WCN7881), - (FastConnect 6700), - (FastConnect 6900), - (FastConnect 7800), - (WCD9370), - (WCD9390), - (WCD9395), - (WCN3950), - (WSA8810), - (WSA8815), - (WSA8832), - (WSA8840), - (WSA8845), - (WSA8845H), - (CSR8811), - (IPQ6010), - (IPQ6018), - (QAM8255P), - (QAM8295P), - (QAMSRV1H), - (QAMSRV1M), - (QCA4024), - (QCA6595), - (QCA6595AU), - (QCA6696), - (QCA6698AQ), - (QCA6797AQ), - (QCA8075), - (QCA8081), - (QCM5430), - (QCM6490), - (QCN5022), - (QCN5052), - (QCN5122), - (QCN5152), - (QCN6023), - (QCN6024), - (QCN9000), - (QCN9012), - (QCN9024), - (QCN9070), - (SA7255P), - (SA8255P), - (SA8295P), - (SA9000P), - (SM7675), - (SM7675P), - (SM8550P), - (SM8635), - (SM8635P), - (SXR2230P), - (SXR2330P), - (WCD9340), - (WCD9375), - (WCD9378), - (WCD9385), - (WCN3980), - (WCN3988), - (WCN6450), - (WCN6650), - (WCN6755), - (Snapdragon AR1 Gen 1 Platform), - (SM6650P), - (SM8650Q), - (QMP1000), - (Snapdragon X32 5G Modem-RF System), - (SM7435), - (SM7635P), - (FastConnect 6200), - (QCA6174A), - (QCA6391), - (QCM2290), - (QCM4325), - (QCM6125), - (QCN9011), - (QCS2290), - (QCS4290), - (QEP8111), - (SC8380XP), - (SD865 5G), - (Snapdragon 4 Gen 2 Mobile Platform), - (Snapdragon 625 Mobile Platform), - (Snapdragon 626 Mobile Platform), - (SW5100), - (SW5100P), - (WCD9326), - (WCN3615), - (WCN3660B), - (WCN3680B), - (WCN3910), - (QCA9984), - (Snapdragon 820 Automotive Platform), - (QCA6564A), - (QCA9377), - (QCA8695AU), - (SXR2350P), - (MDM9628), - (QCA9367), - (SM7550), - (SM7550P), - (Snapdragon 6 Gen 1 Mobile Platform), - (QCS6690), - (Snapdragon 7 Gen 1 Mobile Platform), - (Snapdragon 7+ Gen 2 Mobile Platform), - (G1 Gen 1), - (G2 Gen 1), - (IQ9 Series Platform), - (LeMans_AU_LGIT), - (LeMansAU), - (Milos), - (Netrani), - (Orne), - (Palawan25), - (Pandeiro), - (QLN1083BD), - (QLN1086BD), - (QPA1083BD), - (QPA1086BD), - (Qualcomm 215 Mobile Platform), - (QXM1093), - (QXM1094), - (QXM1095), - (QXM1096), - (SAR2130P), - (SM6225P), - (Smart Display 200 Platform), - (Snapdragon 480+ 5G Mobile Platform), - (Snapdragon 6 Gen 3 Mobile Platform), - (Snapdragon 6 Gen 4 Mobile Platform), - (Snapdragon 685 4G Mobile Platform), - (Snapdragon 7s Gen 3 Mobile Platform), - (Snapdragon 8 Elite), - (Snapdragon 8 Elite Gen 5), - (Themisto), - (Vision Intelligence 100 Platform), - (Vision Intelligence 200 Platform), - (QAM8397P), - (Networking Pro 1200 Platform), - (Networking Pro 1210 Platform), - (Networking Pro 1610 Platform), - (Networking Pro 400 Platform), - (Networking Pro 600 Platform), - (Networking Pro 610 Platform), - (Networking Pro 800 Platform), - (Networking Pro 810 Platform), - (XRV7209), - (XRV9209), - (G3x Gen 2), - (Milos_IOT), - (Molokai), - (QMB715), - (QMP2001), - (SM6450P), - (SM6475P), - (SM6475Q), - (SM6850), - (SM7435P), - (SM7525), - (SM8735P), - (SM8845P), - (Snapdragon 7 Gen 4 Mobile Platform), - (WCN7760), - (WSA8850), - (WSA8850W), - (WSA8855C), - (X1E80100), - (QCM8838), - (SDR753), - (Kalpeni), - (Snapdragon Wear Elite platform), - (QAM8797P), - (Qualcomm Video Collaboration VC1 Platform), - (Qualcomm Video Collaboration VC3 Platform), - (Qualcomm Video Collaboration VC5 Platform), - (SM4850), - (SM4850P)

Product types

Firmware, Микропрограммный код аппаратных компонентов компьютера

Mitigations

Использование рекомендаций производителя: https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Qualcomm Technologies Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (IPQ4019), - (IPQ8064), - (QCA9980), - (SD 8 Gen1 5G), - (WCD9380), - (WSA8830), - (WSA8835), - (SD662), - (SM8475P), - (WCD9371), - (QCA7500), - (Snapdragon W5+ Gen 1 Wearable Platform), - (Snapdragon XR2 5G Platform), - (Snapdragon 8 Gen 1 Mobile Platform), - (Snapdragon 4 Gen 1 Mobile Platform), - (Snapdragon 460 Mobile Platform), - (Snapdragon 480 5G Mobile Platform), - (Snapdragon 662 Mobile Platform), - (Snapdragon 680 4G Mobile Platform), - (Snapdragon 695 5G Mobile Platform), - (Snapdragon 8+ Gen 1 Mobile Platform), - (Snapdragon XR2+ Gen 1 Platform), - (Snapdragon 8 Gen 2 Mobile Platform), - (Snapdragon 8+ Gen 2 Mobile Platform), - (Immersive Home 214 Platform), - (Immersive Home 216 Platform), - (Immersive Home 316 Platform), - (Immersive Home 318 Platform), - (IPQ5010), - (IPQ8076), - (IPQ8078), - (QCA9889), - (QCN5024), - (QCN5124), - (QCN5154), - (QCN5164), - (QCN9100), - (SA8770P), - (AR9380), - (IPQ8065), - (IPQ8068), - (QCA6564AU), - (QCA6574A), - (QCA6574AU), - (QCA9886), - (QCA9888), - (QCA9985), - (QCA9990), - (QCA9992), - (QCA9994), - (QCN9022), - (IPQ8070), - (SD626), - (Snapdragon 8 Gen 3 Mobile Platform), - (Snapdragon X35 5G Modem-RF System), - (Snapdragon X5 LTE Modem), - (IPQ4018), - (IPQ4028), - (IPQ4029), - (QCA9880), - (QCA9898), - (SA7775P), - (SA8620P), - (SRV1H), - (SRV1M), - (SXR2250P), - (SM8750P), - (WCN7860), - (WCN7861), - (WCN7880), - (WCN7881), - (FastConnect 6700), - (FastConnect 6900), - (FastConnect 7800), - (WCD9370), - (WCD9390), - (WCD9395), - (WCN3950), - (WSA8810), - (WSA8815), - (WSA8832), - (WSA8840), - (WSA8845), - (WSA8845H), - (CSR8811), - (IPQ6010), - (IPQ6018), - (QAM8255P), - (QAM8295P), - (QAMSRV1H), - (QAMSRV1M), - (QCA4024), - (QCA6595), - (QCA6595AU), - (QCA6696), - (QCA6698AQ), - (QCA6797AQ), - (QCA8075), - (QCA8081), - (QCM5430), - (QCM6490), - (QCN5022), - (QCN5052), - (QCN5122), - (QCN5152), - (QCN6023), - (QCN6024), - (QCN9000), - (QCN9012), - (QCN9024), - (QCN9070), - (SA7255P), - (SA8255P), - (SA8295P), - (SA9000P), - (SM7675), - (SM7675P), - (SM8550P), - (SM8635), - (SM8635P), - (SXR2230P), - (SXR2330P), - (WCD9340), - (WCD9375), - (WCD9378), - (WCD9385), - (WCN3980), - (WCN3988), - (WCN6450), - (WCN6650), - (WCN6755), - (Snapdragon AR1 Gen 1 Platform), - (SM6650P), - (SM8650Q), - (QMP1000), - (Snapdragon X32 5G Modem-RF System), - (SM7435), - (SM7635P), - (FastConnect 6200), - (QCA6174A), - (QCA6391), - (QCM2290), - (QCM4325), - (QCM6125), - (QCN9011), - (QCS2290), - (QCS4290), - (QEP8111), - (SC8380XP), - (SD865 5G), - (Snapdragon 4 Gen 2 Mobile Platform), - (Snapdragon 625 Mobile Platform), - (Snapdragon 626 Mobile Platform), - (SW5100), - (SW5100P), - (WCD9326), - (WCN3615), - (WCN3660B), - (WCN3680B), - (WCN3910), - (QCA9984), - (Snapdragon 820 Automotive Platform), - (QCA6564A), - (QCA9377), - (QCA8695AU), - (SXR2350P), - (MDM9628), - (QCA9367), - (SM7550), - (SM7550P), - (Snapdragon 6 Gen 1 Mobile Platform), - (QCS6690), - (Snapdragon 7 Gen 1 Mobile Platform), - (Snapdragon 7+ Gen 2 Mobile Platform), - (G1 Gen 1), - (G2 Gen 1), - (IQ9 Series Platform), - (LeMans_AU_LGIT), - (LeMansAU), - (Milos), - (Netrani), - (Orne), - (Palawan25), - (Pandeiro), - (QLN1083BD), - (QLN1086BD), - (QPA1083BD), - (QPA1086BD), - (Qualcomm 215 Mobile Platform), - (QXM1093), - (QXM1094), - (QXM1095), - (QXM1096), - (SAR2130P), - (SM6225P), - (Smart Display 200 Platform), - (Snapdragon 480+ 5G Mobile Platform), - (Snapdragon 6 Gen 3 Mobile Platform), - (Snapdragon 6 Gen 4 Mobile Platform), - (Snapdragon 685 4G Mobile Platform), - (Snapdragon 7s Gen 3 Mobile Platform), - (Snapdragon 8 Elite), - (Snapdragon 8 Elite Gen 5), - (Themisto), - (Vision Intelligence 100 Platform), - (Vision Intelligence 200 Platform), - (QAM8397P), - (Networking Pro 1200 Platform), - (Networking Pro 1210 Platform), - (Networking Pro 1610 Platform), - (Networking Pro 400 Platform), - (Networking Pro 600 Platform), - (Networking Pro 610 Platform), - (Networking Pro 800 Platform), - (Networking Pro 810 Platform), - (XRV7209), - (XRV9209), - (G3x Gen 2), - (Milos_IOT), - (Molokai), - (QMB715), - (QMP2001), - (SM6450P), - (SM6475P), - (SM6475Q), - (SM6850), - (SM7435P), - (SM7525), - (SM8735P), - (SM8845P), - (Snapdragon 7 Gen 4 Mobile Platform), - (WCN7760), - (WSA8850), - (WSA8850W), - (WSA8855C), - (X1E80100), - (QCM8838), - (SDR753), - (Kalpeni), - (Snapdragon Wear Elite platform), - (QAM8797P), - (Qualcomm Video Collaboration VC1 Platform), - (Qualcomm Video Collaboration VC3 Platform), - (Qualcomm Video Collaboration VC5 Platform), - (SM4850), - (SM4850P)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "18.01.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "13.10.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.10.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-16244",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2026-24088",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "IPQ4019, IPQ8064, QCA9980, SD 8 Gen1 5G, WCD9380, WSA8830, WSA8835, SD662, SM8475P, WCD9371, QCA7500, Snapdragon W5+ Gen 1 Wearable Platform, Snapdragon XR2 5G Platform, Snapdragon 8 Gen 1 Mobile Platform, Snapdragon 4 Gen 1 Mobile Platform, Snapdragon 460 Mobile Platform, Snapdragon 480 5G Mobile Platform, Snapdragon 662 Mobile Platform, Snapdragon 680 4G Mobile Platform, Snapdragon 695 5G Mobile Platform, Snapdragon 8+ Gen 1 Mobile Platform, Snapdragon XR2+ Gen 1 Platform, Snapdragon 8 Gen 2 Mobile Platform, Snapdragon 8+ Gen 2 Mobile Platform, Immersive Home 214 Platform, Immersive Home 216 Platform, Immersive Home 316 Platform, Immersive Home 318 Platform, IPQ5010, IPQ8076, IPQ8078, QCA9889, QCN5024, QCN5124, QCN5154, QCN5164, QCN9100, SA8770P, AR9380, IPQ8065, IPQ8068, QCA6564AU, QCA6574A, QCA6574AU, QCA9886, QCA9888, QCA9985, QCA9990, QCA9992, QCA9994, QCN9022, IPQ8070, SD626, Snapdragon 8 Gen 3 Mobile Platform, Snapdragon X35 5G Modem-RF System, Snapdragon X5 LTE Modem, IPQ4018, IPQ4028, IPQ4029, QCA9880, QCA9898, SA7775P, SA8620P, SRV1H, SRV1M, SXR2250P, SM8750P, WCN7860, WCN7861, WCN7880, WCN7881, FastConnect 6700, FastConnect 6900, FastConnect 7800, WCD9370, WCD9390, WCD9395, WCN3950, WSA8810, WSA8815, WSA8832, WSA8840, WSA8845, WSA8845H, CSR8811, IPQ6010, IPQ6018, QAM8255P, QAM8295P, QAMSRV1H, QAMSRV1M, QCA4024, QCA6595, QCA6595AU, QCA6696, QCA6698AQ, QCA6797AQ, QCA8075, QCA8081, QCM5430, QCM6490, QCN5022, QCN5052, QCN5122, QCN5152, QCN6023, QCN6024, QCN9000, QCN9012, QCN9024, QCN9070, SA7255P, SA8255P, SA8295P, SA9000P, SM7675, SM7675P, SM8550P, SM8635, SM8635P, SXR2230P, SXR2330P, WCD9340, WCD9375, WCD9378, WCD9385, WCN3980, WCN3988, WCN6450, WCN6650, WCN6755, Snapdragon AR1 Gen 1 Platform, SM6650P, SM8650Q, QMP1000, Snapdragon X32 5G Modem-RF System, SM7435, SM7635P, FastConnect 6200, QCA6174A, QCA6391, QCM2290, QCM4325, QCM6125, QCN9011, QCS2290, QCS4290, QEP8111, SC8380XP, SD865 5G, Snapdragon 4 Gen 2 Mobile Platform, Snapdragon 625 Mobile Platform, Snapdragon 626 Mobile Platform, SW5100, SW5100P, WCD9326, WCN3615, WCN3660B, WCN3680B, WCN3910, QCA9984, Snapdragon 820 Automotive Platform, QCA6564A, QCA9377, QCA8695AU, SXR2350P, MDM9628, QCA9367, SM7550, SM7550P, Snapdragon 6 Gen 1 Mobile Platform, QCS6690, Snapdragon 7 Gen 1 Mobile Platform, Snapdragon 7+ Gen 2 Mobile Platform, G1 Gen 1, G2 Gen 1, IQ9 Series Platform, LeMans_AU_LGIT, LeMansAU, Milos, Netrani, Orne, Palawan25, Pandeiro, QLN1083BD, QLN1086BD, QPA1083BD, QPA1086BD, Qualcomm 215 Mobile Platform, QXM1093, QXM1094, QXM1095, QXM1096, SAR2130P, SM6225P, Smart Display 200 Platform, Snapdragon 480+ 5G Mobile Platform, Snapdragon 6 Gen 3 Mobile Platform, Snapdragon 6 Gen 4 Mobile Platform, Snapdragon 685 4G Mobile Platform, Snapdragon 7s Gen 3 Mobile Platform, Snapdragon 8 Elite, Snapdragon 8 Elite Gen 5, Themisto, Vision Intelligence 100 Platform, Vision Intelligence 200 Platform, QAM8397P, Networking Pro 1200 Platform, Networking Pro 1210 Platform, Networking Pro 1610 Platform, Networking Pro 400 Platform, Networking Pro 600 Platform, Networking Pro 610 Platform, Networking Pro 800 Platform, Networking Pro 810 Platform, XRV7209, XRV9209, G3x Gen 2, Milos_IOT, Molokai, QMB715, QMP2001, SM6450P, SM6475P, SM6475Q, SM6850, SM7435P, SM7525, SM8735P, SM8845P, Snapdragon 7 Gen 4 Mobile Platform, WCN7760, WSA8850, WSA8850W, WSA8855C, X1E80100, QCM8838, SDR753, Kalpeni, Snapdragon Wear Elite platform, QAM8797P, Qualcomm Video Collaboration VC1 Platform, Qualcomm Video Collaboration VC3 Platform, Qualcomm Video Collaboration VC5 Platform, SM4850, SM4850P",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u043b\u0430\u0442 Qualcomm, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 (CWE-306)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u043b\u0430\u0442 Qualcomm \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html\nhttps://github.com/aniketlab/POCO-M7-Plus-Jailbreak",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-306",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,2)"
}

CVE-2026-24088 (GCVE-0-2026-24088)

Vulnerability from cvelistv5 – Published: 2026-06-01 22:05 – Updated: 2026-06-03 03:55

Title

Missing Authentication for Critical Function in Boot

Summary

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.

Severity

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-02 00:00 UTC

CWE

CWE-306 - Missing Authentication for Critical Function

Assigner

qualcomm CNA under the mitre root

CNA scorecard C 61/100 over 89 records in the last 180 days details

References

1 reference

URL	Tags
https://docs.qualcomm.com/product/publicresources…

Impacted products

1 product

Vendor	Product	Version
Qualcomm, Inc.	Snapdragon	Affected: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-24088",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-02T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-03T03:55:55.678Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
          ],
          "product": "Snapdragon",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306: Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-01T22:05:37.195Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html"
        }
      ],
      "title": "Missing Authentication for Critical Function in Boot"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2026-24088",
    "datePublished": "2026-06-01T22:05:37.195Z",
    "dateReserved": "2026-01-21T12:51:13.996Z",
    "dateUpdated": "2026-06-03T03:55:55.678Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted