CVE-2026-24088

high

Published 2026-06-01 · Modified 2026-06-03

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

8.2

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVSS v4 NEW

—

not yet in upstream

VIR risk

8.2

Description

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.

Predictions

Exploit likelihood

78%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact

Vendor	Product	Versions	Fixed
qualcomm	ar9380	`-`
qualcomm	csr8811	`-`
qualcomm	fastconnect_6200	`-`
qualcomm	fastconnect_6700	`-`
qualcomm	fastconnect_6900	`-`
qualcomm	fastconnect_7800	`-`
qualcomm	g1_gen_1	`-`
qualcomm	g2_gen_1	`-`
qualcomm	g3x_gen_2	`-`
qualcomm	qca9888	`-`
qualcomm	immersive_home_214_platform	`-`
qualcomm	immersive_home_216_platform	`-`
qualcomm	immersive_home_316_platform	`-`
qualcomm	immersive_home_318_platform	`-`
qualcomm	ipq4018	`-`
qualcomm	ipq4019	`-`
qualcomm	ipq4028	`-`
qualcomm	ipq4029	`-`
qualcomm	ipq5010	`-`
qualcomm	ipq6010	`-`
qualcomm	ipq6018	`-`
qualcomm	ipq8064	`-`
qualcomm	ipq8065	`-`
qualcomm	ipq8068	`-`
qualcomm	ipq8070	`-`
qualcomm	ipq8076	`-`
qualcomm	ipq8078	`-`
qualcomm	iq-9075	`-`
qualcomm	kalpeni	`-`
qualcomm	lemans_au_lgit	`-`
qualcomm	lemansau	`-`
qualcomm	mdm9628	`-`
qualcomm	milos	`-`
qualcomm	milos_iot	`-`
qualcomm	molokai	`-`
qualcomm	netrani	`-`
qualcomm	networking_pro_1200_platform	`-`
qualcomm	networking_pro_1210_platform	`-`
qualcomm	networking_pro_1610_platform	`-`
qualcomm	networking_pro_400_platform	`-`
qualcomm	networking_pro_600_platform	`-`
qualcomm	networking_pro_610_platform	`-`
qualcomm	networking_pro_800_platform	`-`
qualcomm	networking_pro_810_platform	`-`
qualcomm	orne	`-`
qualcomm	palawan25	`-`
qualcomm	snapdragon_480_5g_mobile_platform	`-`
qualcomm	snapdragon_480\+_5g_mobile_platform	`-`
qualcomm	snapdragon_6_gen_1_mobile_platform	`-`
qualcomm	snapdragon_6_gen_3_mobile_platform	`-`
qualcomm	snapdragon_6_gen_4_mobile_platform	`-`
qualcomm	snapdragon_625_mobile_platform	`-`
qualcomm	snapdragon_626_mobile_platform	`-`
qualcomm	snapdragon_662_mobile_platform	`-`
qualcomm	snapdragon_680_4g_mobile_platform	`-`
qualcomm	snapdragon_685_4g_mobile_platform	`-`
qualcomm	snapdragon_695_5g_mobile_platform	`-`
qualcomm	snapdragon_7_gen_1_mobile_platform	`-`
qualcomm	snapdragon_7_gen_4_mobile_platform	`-`
qualcomm	snapdragon_7\+_gen_2_mobile_platform	`-`
qualcomm	snapdragon_7s_gen_3_mobile_platform	`-`
qualcomm	snapdragon_8_elite	`-`
qualcomm	snapdragon_8_elite_gen_5	`-`
qualcomm	snapdragon_8_gen_1_mobile_platform	`-`
qualcomm	snapdragon_8_gen_2_mobile_platform	`-`
qualcomm	snapdragon_8_gen_3_mobile_platform	`-`
qualcomm	snapdragon_8\+_gen_1_mobile_platform	`-`
qualcomm	snapdragon_8\+_gen_2_mobile_platform	`-`
qualcomm	snapdragon_820_automotive_platform	`-`
qualcomm	snapdragon_ar1_gen_1_platform	`-`
qualcomm	snapdragon_w5\+_gen_1_wearable_platform	`-`
qualcomm	snapdragon_x32_5g_modem-rf_system	`-`
qualcomm	snapdragon_x35_5g_modem-rf_system	`-`
qualcomm	snapdragon_x5_lte_modem	`-`
qualcomm	snapdragon_xr2_5g_platform	`-`
qualcomm	snapdragon_xr2\+_gen_1_platform	`-`
qualcomm	snapdragon_wear_elite_platform	`-`
qualcomm	srv1h	`-`
qualcomm	srv1m	`-`
qualcomm	sw5100	`-`
qualcomm	sw5100p	`-`
qualcomm	sxr2230p	`-`
qualcomm	sxr2250p	`-`
qualcomm	sxr2330p	`-`
qualcomm	sxr2350p	`-`
qualcomm	themisto	`-`
qualcomm	pandeiro	`-`
qualcomm	qam8255p	`-`
qualcomm	qam8295p	`-`
qualcomm	qam8397p	`-`
qualcomm	qam8797p	`-`
qualcomm	qamsrv1h	`-`
qualcomm	qamsrv1m	`-`
qualcomm	qca4024	`-`
qualcomm	qca6174a	`-`
qualcomm	qca6391	`-`
qualcomm	qca6564a	`-`
qualcomm	qca6564au	`-`
qualcomm	qca6574a	`-`
qualcomm	qca6574au	`-`
qualcomm	qca6595	`-`
qualcomm	qca6595au	`-`
qualcomm	qca6696	`-`
qualcomm	qca6698aq	`-`
qualcomm	qca6797aq	`-`
qualcomm	qca7500	`-`
qualcomm	qca8075	`-`
qualcomm	qca8081	`-`
qualcomm	qca8695au	`-`
qualcomm	qca9367	`-`
qualcomm	qca9377	`-`
qualcomm	qca9880	`-`
qualcomm	qca9886	`-`
qualcomm	qca9889	`-`
qualcomm	qca9898	`-`
qualcomm	qca9980	`-`
qualcomm	qca9984	`-`
qualcomm	qca9985	`-`
qualcomm	qca9990	`-`
qualcomm	qca9992	`-`
qualcomm	qca9994	`-`
qualcomm	qcm2290	`-`
qualcomm	qcm4325	`-`
qualcomm	qcm5430	`-`
qualcomm	qcm6125	`-`
qualcomm	vision_intelligence_100_platform	`-`
qualcomm	vision_intelligence_200_platform	`-`
qualcomm	wcd9326	`-`
qualcomm	wcd9340	`-`
qualcomm	wcd9370	`-`
qualcomm	wcd9371	`-`
qualcomm	wcd9375	`-`
qualcomm	wcd9378	`-`
qualcomm	wcd9380	`-`
qualcomm	wcd9385	`-`
qualcomm	wcd9390	`-`
qualcomm	wcd9395	`-`
qualcomm	wcn3615	`-`
qualcomm	wcn3660b	`-`
qualcomm	wcn3680b	`-`
qualcomm	wcn3910	`-`
qualcomm	wcn3950	`-`
qualcomm	wcn3980	`-`
qualcomm	wcn3988	`-`
qualcomm	wcn6450	`-`
qualcomm	wcn6650	`-`
qualcomm	wcn6755	`-`
qualcomm	wcn7760	`-`
qualcomm	wcn7860	`-`
qualcomm	wcn7861	`-`
qualcomm	wcn7880	`-`
qualcomm	wcn7881	`-`
qualcomm	wsa8810	`-`
qualcomm	wsa8815	`-`
qualcomm	wsa8830	`-`
qualcomm	wsa8832	`-`
qualcomm	wsa8835	`-`
qualcomm	wsa8840	`-`
qualcomm	wsa8845	`-`
qualcomm	wsa8845h	`-`
qualcomm	wsa8850	`-`
qualcomm	wsa8850w	`-`
qualcomm	wsa8855c	`-`
qualcomm	x1e80100	`-`
qualcomm	xrv7209	`-`
qualcomm	qcm6490	`-`
qualcomm	qcm8838	`-`
qualcomm	qcn5022	`-`
qualcomm	qcn5024	`-`
qualcomm	qcn5052	`-`
qualcomm	qcn5122	`-`
qualcomm	qcn5124	`-`
qualcomm	qcn5152	`-`
qualcomm	qcn5154	`-`
qualcomm	qcn5164	`-`
qualcomm	qcn6023	`-`
qualcomm	qcn6024	`-`
qualcomm	qcn9000	`-`
qualcomm	qcn9011	`-`
qualcomm	qcn9012	`-`
qualcomm	qcn9022	`-`
qualcomm	qcn9024	`-`
qualcomm	qcn9070	`-`
qualcomm	qcn9100	`-`
qualcomm	qcs2290	`-`
qualcomm	qcs4290	`-`
qualcomm	qcs6690	`-`
qualcomm	qep8111	`-`
qualcomm	qln1083bd	`-`
qualcomm	qln1086bd	`-`
qualcomm	qmb715	`-`
qualcomm	qmp1000	`-`
qualcomm	qmp2001	`-`
qualcomm	qpa1083bd	`-`
qualcomm	qpa1086bd	`-`
qualcomm	qualcomm_215_mobile_platform	`-`
qualcomm	video_collaboration_vc1_platform	`-`
qualcomm	video_collaboration_vc3_platform	`-`
qualcomm	video_collaboration_vc5_platform	`-`
qualcomm	qxm1093	`-`

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

CWEs

CWE-306

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.