CVE-2026-24090
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
Risk Assessment
An attacker can alter the boot process, potentially leading to execution of malicious code before the operating system loads.
Recommendation
It is recommended to update the device firmware to a version containing a fix.
Other vulnerabilities in Qualcomm
See all- CVE-2026-25294High
Transient DOS while parsing frame during channel usage.
- CVE-2026-25290High
Memory Corruption when validating large data buffers from external sources using addition to check buffer length.
- CVE-2026-25284High
Information Disclosure when a pointer is reused after being deallocated.
- CVE-2026-25283High
Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.
- CVE-2026-25282High
Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.
- CVE-2026-25281High
Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.
- CVE-2026-25280High
Memory corruption when processing escape handling flow with insufficient user buffer sizes.
- CVE-2026-25278High
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.
- CVE-2025-47396High
Memory corruption occurs when a secure application is launched on a device with insufficient memory.
- CVE-2025-47394High
Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
Original NVD description (English source)
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS