Vulnerabilities ›

CVE-2026-24082

High

CWE-416 — Weakness Type

                    Published: May 4, 2026                      ·  Modified: May 11, 2026                      ·  Source: NVD                

CVSS v3

7.8

🔗 NVD Official

📄 Description (English)

Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

🤖 AI Executive Summary

CVE-2026-24082 is a memory corruption vulnerability (CWE-416: Use After Free) with CVSS 7.8 that occurs during performance counter deselect operations when copying data from freed memory. This vulnerability could allow attackers to execute arbitrary code or cause denial of service on affected systems.

📄 Description (Arabic)

ثغرة فساد الذاكرة هذه تنشأ من استخدام مؤشر لذاكرة تم تحريرها أثناء عمليات إلغاء تحديد عداد الأداء. يمكن للمهاجمين المحليين استغلال هذه الثغرة للوصول إلى امتيازات أعلى أو تعطيل الخدمات الحرجة.

🤖 ملخص تنفيذي (AI)

هذا الثغرة تتعلق بفساد الذاكرة عند محاولة نسخ البيانات من ذاكرة محررة أثناء عملية إلغاء تحديد عداد الأداء. يمكن للمهاجمين استغلال هذه الثغرة لتنفيذ أكواد عشوائية أو التسبب في توقف الخدمات.

🤖 AI Intelligence Analysis Analyzed: May 8, 2026 03:32

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: high

🏢 Affected Saudi Sectors

banking telecom energy government healthcare

🎯 MITRE ATT&CK Techniques

T1068 T1203 T1499

⚖️ Saudi Risk Score (AI)

8.0

/ 10.0

🔧 Remediation Steps (English)

Apply security patches immediately from your vendor. Implement memory protection mechanisms including Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP). Monitor system logs for suspicious performance counter operations. Restrict access to performance counter interfaces to authorized users only.

🔧 خطوات المعالجة (العربية)

طبق التحديثات الأمنية فوراً من المورد. طبق آليات حماية الذاكرة بما فيها ASLR و DEP. راقب سجلات النظام للعمليات المريبة على عدادات الأداء. قيد الوصول إلى واجهات عداد الأداء للمستخدمين المصرح لهم فقط.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

5.1 5.2 5.3

🔵 SAMA CSF

CC-6.1 CC-6.2 CC-7.2

🟡 ISO 27001:2022

A.12.2.1 A.12.6.1 A.14.2.1

🔗 References & Sources 1

🔗

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html

product-security@qualcomm.com

Patch Vendor Advisory

📦 Affected Products / CPE 50 entries

qualcomm:qxm1096_firmware:-

qualcomm:robotics_rb2_firmware:-

qualcomm:robotics_rb5_firmware:-

qualcomm:sa4150p_firmware:-

qualcomm:sa4155p_firmware:-

qualcomm:sa6145p_firmware:-

qualcomm:sa6150p_firmware:-

qualcomm:sa6155p_firmware:-

qualcomm:sa7255p_firmware:-

qualcomm:sa7775p_firmware:-

qualcomm:sa8145p_firmware:-

qualcomm:sa8150p_firmware:-

qualcomm:sa8155p_firmware:-

qualcomm:sa8195p_firmware:-

qualcomm:sa8255p_firmware:-

qualcomm:sa8295p_firmware:-

qualcomm:sa8620p_firmware:-

qualcomm:sa8770p_firmware:-

qualcomm:sa9000p_firmware:-

qualcomm:sar1165p_firmware:-

qualcomm:sd662_firmware:-

qualcomm:sm6225p_firmware:-

qualcomm:sm6650p_firmware:-

qualcomm:sm7525_firmware:-

qualcomm:sm7550_firmware:-

qualcomm:sm7550p_firmware:-

qualcomm:sm7635p_firmware:-

qualcomm:sm7675_firmware:-

qualcomm:sm7675p_firmware:-

qualcomm:sm8550p_firmware:-

qualcomm:sm8635_firmware:-

qualcomm:sm8635p_firmware:-

qualcomm:sm8650q_firmware:-

qualcomm:smart_audio_400_firmware:-

qualcomm:snapdragon_4_gen_1_mobile_firmware:-

qualcomm:snapdragon_460_mobile_firmware:-

qualcomm:snapdragon_480_5g_mobile_firmware:-

qualcomm:snapdragon_480\+_5g_mobile_firmware:-

qualcomm:snapdragon_6_gen_4_mobile_firmware:-

qualcomm:snapdragon_662_mobile_firmware:-

qualcomm:ar8031_firmware:-

qualcomm:ar8035_firmware:-

qualcomm:csra6620_firmware:-

qualcomm:csra6640_firmware:-

qualcomm:fastconnect_6200_firmware:-

qualcomm:fastconnect_6700_firmware:-

qualcomm:fastconnect_6900_firmware:-

qualcomm:fastconnect_7800_firmware:-

qualcomm:flight_rb5_5g_firmware:-

qualcomm:fwa_gen_3_ultra_firmware:-

📊 CVSS Score

7.8

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorL — Low / Local

Attack ComplexityL — Low / Local

Privileges RequiredL — Low / Local

User InteractionN — None / Network

ScopeU — Unchanged

ConfidentialityH — High

IntegrityH — High

AvailabilityH — High

📋 Quick Facts

Severity High

CVSS Score7.8

CWECWE-416

EPSS0.01%

Exploit No

Patch ✓ Yes

Published 2026-05-04

Source Feed nvd

🇸🇦 Saudi Risk Score

8.0

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

patch-available CWE-416

🏢 Vendor Advisories

🔗 https://docs.qualcomm.com/product/publicresources/se...

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

💬 Comments

Loading comments

CVE-2026-24082

💬 Comments

Introduce Yourself

Sign In Required