CVE-2026-24084: Qualcomm, Inc. Snapdragon, заобикаляне на вход и права

Описание

Оригинално описание

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

Засегнати продукти

• Qualcomm, Inc. Snapdragon: 5G Fixed Wireless Access Platform; AQT1000; AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; FWA Gen 3 Ultra Platform; Milos; Netrani; Orne; Palawan25; QCA6174A; QCA6391; QCA6420; QCA6430; QCA6574AU; QCA6584AU; QCA6595AU; QCA6678AQ; QCA6688AQ; QCA6696; QCA6698AQ; QCA6698AU; QCA6797AQ; QCA8081; QCA8337; QCC710; QCM4490; QCM5430; QCM6490; QCN6024; QCN6224; QCN6274; QCN9011; QCN9012; QCN9024; QCS4490; QCS8550; QFW7114; QFW7124; QMP1000; Qualcomm Video Collaboration VC3 Platform; SD 8 Gen1 5G; SDX57M; SDX61; SDX71M; SM6650P; SM7325P; SM7435; SM7550; SM7550P; SM7635P; SM7675; SM7675P; SM8475P; SM8550P; SM8635; SM8635P; SM8650Q; SM8750P; Snapdragon 4 Gen 1 Mobile Platform; Snapdragon 4 Gen 2 Mobile Platform; Snapdragon 480 5G Mobile Platform; Snapdragon 480+ 5G Mobile Platform; Snapdragon 6 Gen 1 Mobile Platform; Snapdragon 6 Gen 3 Mobile Platform; Snapdragon 6 Gen 4 Mobile Platform; Snapdragon 690 5G Mobile Platform; Snapdragon 695 5G Mobile Platform; Snapdragon 7 Gen 1 Mobile Platform; Snapdragon 7+ Gen 2 Mobile Platform; Snapdragon 778G 5G Mobile Platform; Snapdragon 778G+ 5G Mobile Platform; Snapdragon 782G Mobile Platform; Snapdragon 7c+ Gen 3 Compute; Snapdragon 7s Gen 3 Mobile Platform; Snapdragon 8 Elite; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8 Gen 3 Mobile Platform; Snapdragon 8+ Gen 1 Mobile Platform; Snapdragon 8+ Gen 2 Mobile Platform; Snapdragon 865 5G Mobile Platform; Snapdragon 865+ 5G Mobile Platform; Snapdragon 870 5G Mobile Platform; Snapdragon 888 5G Mobile Platform; Snapdragon 888+ 5G Mobile Platform; Snapdragon 8c Compute Platform "Poipu Lite"; Snapdragon 8cx Compute Platform; Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro"; Snapdragon Auto 5G Modem-RF; Snapdragon Auto 5G Modem-RF Gen 2; Snapdragon X53 5G Modem-RF System; Snapdragon X55 5G Modem-RF System; Snapdragon X65 5G Modem-RF System; Snapdragon X70 Modem-RF System; Snapdragon X72 5G Modem-RF System; Snapdragon X75 5G Modem-RF System; Snapdragon X80 5G Modem-RF System; SnapdragonAuto 4GModem; WCD9340; WCD9341; WCD9370; WCD9371; WCD9375; WCD9378; WCD9380; WCD9385; WCD9390; WCD9395; WCN3950; WCN3988; WCN6650; WCN6755; WCN7860; WCN7861; WCN7880; WCN7881; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845; WSA8845H

Вид слабост

• CWE-1294 Insecure Security Identifier Mechanism

История

Други уязвимости в Qualcomm, Inc. Snapdragon

• 7.8CVE-2026-57559
• 7.8CVE-2026-57555
• 7.8CVE-2026-57554
• 7.5CVE-2026-57546
• 7.8CVE-2026-57545

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-24084
• https://nvd.nist.gov/vuln/detail/CVE-2026-24084
• https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html