Vulnerabilities ›

CVE-2026-24085

High

CWE-121 — Weakness Type

                    Published: Jun 1, 2026                      ·  Modified: Jun 8, 2026                      ·  Source: NVD                

CVSS v3

7.2

🔗 NVD Official

📄 Description (English)

Memory Corruption when processing display command line information due to improper initialization of a variable.

🤖 AI Executive Summary

CVE-2026-24085 is a high-severity memory corruption vulnerability in Qualcomm WiFi chipset firmware (QCA series) affecting display command line processing due to improper variable initialization. The vulnerability could allow local attackers to cause denial of service or potentially execute arbitrary code on affected devices. This impacts a wide range of enterprise and consumer devices using these chipsets across Saudi Arabia's critical infrastructure and commercial sectors.

📄 Description (Arabic)

🤖 AI Intelligence Analysis Analyzed: Jun 6, 2026 12:33

🇸🇦 Saudi Arabia Impact Assessment

This vulnerability poses significant risk to Saudi banking sector (SAMA-regulated institutions), government agencies (NCA oversight), telecommunications providers (STC, Mobily, Zain), healthcare systems, and energy sector (ARAMCO, SEC). The QCA chipsets are widely deployed in enterprise WiFi infrastructure, IoT devices, and network equipment used across these sectors. Potential impacts include network disruption, unauthorized access to sensitive systems, and compromise of critical infrastructure connectivity. Government entities and financial institutions are particularly vulnerable due to extensive WiFi deployment in secure facilities.

🏢 Affected Saudi Sectors

Banking and Financial Services Government and Public Administration Telecommunications Healthcare and Medical Devices Energy and Utilities Critical Infrastructure Defense and Security Education and Research

🎯 MITRE ATT&CK Techniques

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution T1499 - Endpoint Denial of Service T1561 - Disk Wipe T1529 - System Shutdown/Reboot T1547 - Boot or Logon Autostart Execution

⚖️ Saudi Risk Score (AI)

7.8

/ 10.0

🔧 Remediation Steps (English)

IMMEDIATE ACTIONS:

1. Identify all devices using affected Qualcomm QCA chipsets (QCA6391, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6678AQ, QCA6688AQ) in your environment

2. Isolate critical systems from untrusted network access until patching is complete

3. Implement network segmentation to limit local access to affected devices



PATCHING GUIDANCE:

4. Contact Qualcomm or your device manufacturer immediately for firmware patches

5. Prioritize patching for devices in critical infrastructure, banking, and government networks

6. Test patches in non-production environments before deployment

7. Deploy patches according to manufacturer's firmware update procedures



COMPENSATING CONTROLS (if patches unavailable):

8. Restrict physical and local network access to affected devices

9. Disable unnecessary command-line interfaces and debug features

10. Monitor system logs for abnormal memory access patterns or crashes

11. Implement strict access controls on WiFi management interfaces



DETECTION RULES:

12. Monitor for unexpected device reboots or WiFi interface failures

13. Alert on unusual memory allocation patterns in WiFi driver logs

14. Track failed command execution attempts on affected chipsets

15. Implement IDS/IPS rules to detect exploitation attempts targeting display command processing

🔧 خطوات المعالجة (العربية)

الإجراءات الفورية:

1. تحديد جميع الأجهزة التي تستخدم رقائق Qualcomm QCA المتأثرة (QCA6391، QCA6564AU، QCA6574، QCA6574A، QCA6574AU، QCA6584AU، QCA6595، QCA6595AU، QCA6678AQ، QCA6688AQ) في بيئتك

2. عزل الأنظمة الحرجة عن الوصول إلى الشبكة غير الموثوقة حتى اكتمال التصحيح

3. تنفيذ تقسيم الشبكة لتحديد الوصول المحلي إلى الأجهزة المتأثرة

إرشادات التصحيح:

4. الاتصال بـ Qualcomm أو مصنع الجهاز فوراً للحصول على تحديثات البرامج الثابتة

5. إعطاء الأولوية لتصحيح الأجهزة في البنية التحتية الحرجة والشبكات الحكومية والمصرفية

6. اختبار التصحيحات في بيئات غير الإنتاج قبل النشر

7. نشر التصحيحات وفقاً لإجراءات تحديث البرامج الثابتة من المصنع

الضوابط البديلة (إذا لم تكن التصحيحات متاحة):

8. تقييد الوصول المادي والمحلي للشبكة إلى الأجهزة المتأثرة

9. تعطيل واجهات سطر الأوامر غير الضرورية وميزات التصحيح

10. مراقبة سجلات النظام للبحث عن أنماط الوصول إلى الذاكرة غير الطبيعية أو الأعطال

11. تنفيذ ضوابط وصول صارمة على واجهات إدارة WiFi

قواعد الكشف:

12. مراقبة إعادة تشغيل الأجهزة غير المتوقعة أو فشل واجهة WiFi

13. التنبيه على أنماط تخصيص الذاكرة غير العادية في سجلات برنامج تشغيل WiFi

14. تتبع محاولات تنفيذ الأوامر الفاشلة على الرقائق المتأثرة

15. تنفيذ قواعد IDS/IPS للكشف عن محاولات الاستغلال الموجهة لمعالجة أوامر العرض

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

ECC 2024 - 5.1.1 (Asset Management and Inventory) ECC 2024 - 5.2.1 (Vulnerability Management) ECC 2024 - 5.3.1 (Patch Management) ECC 2024 - 5.4.1 (Configuration Management)

🔵 SAMA CSF

SAMA CSF - ID.AM-1 (Physical and Cyber Assets) SAMA CSF - ID.RA-1 (Asset Vulnerabilities) SAMA CSF - PR.IP-12 (System and Information Integrity) SAMA CSF - DE.CM-8 (Vulnerability Scans)

🟡 ISO 27001:2022

ISO 27001:2022 - A.5.9 (Access Control) ISO 27001:2022 - A.8.1 (User Endpoint Devices) ISO 27001:2022 - A.8.2 (Privileged Access Rights) ISO 27001:2022 - A.14.2 (System Development and Change Management)

🟣 PCI DSS v4.0.1

PCI DSS 4.0 - 2.4 (Document and Implement Security Configuration Standards) PCI DSS 4.0 - 6.2 (Security Patches and Updates)

🔗 References & Sources 1

🔗

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

product-security@qualcomm.com

Patch Vendor Advisory

📦 Affected Products / CPE 50 entries

qualcomm:qca6391_firmware:-

qualcomm:qca6564au_firmware:-

qualcomm:qca6574_firmware:-

qualcomm:qca6574a_firmware:-

qualcomm:qca6574au_firmware:-

qualcomm:qca6584au_firmware:-

qualcomm:qca6595_firmware:-

qualcomm:qca6595au_firmware:-

qualcomm:qca6678aq_firmware:-

qualcomm:qca6688aq_firmware:-

qualcomm:qca6696_firmware:-

qualcomm:qca6698aq_firmware:-

qualcomm:qca6698au_firmware:-

qualcomm:qca6797aq_firmware:-

qualcomm:qca8081_firmware:-

qualcomm:qca8337_firmware:-

qualcomm:qca8386_firmware:-

qualcomm:qca8695au_firmware:-

qualcomm:qca9367_firmware:-

qualcomm:qca9377_firmware:-

qualcomm:qcc710_firmware:-

qualcomm:qcf8001_firmware:-

qualcomm:qcm2290_firmware:-

qualcomm:qcm4325_firmware:-

qualcomm:qcm4490_firmware:-

qualcomm:qcm5430_firmware:-

qualcomm:qcm6125_firmware:-

qualcomm:qcm6490_firmware:-

qualcomm:qcm8838_firmware:-

qualcomm:qcn6024_firmware:-

qualcomm:qcn6224_firmware:-

qualcomm:qcn6274_firmware:-

qualcomm:qcn9011_firmware:-

qualcomm:qcn9012_firmware:-

qualcomm:qcn9024_firmware:-

qualcomm:qcs2290_firmware:-

qualcomm:qcs4290_firmware:-

qualcomm:qcs4490_firmware:-

qualcomm:qcs6690_firmware:-

qualcomm:qcs8550_firmware:-

qualcomm:snapdragon_888_5g_mobile_platform_firmware:-

qualcomm:snapdragon_888\+_5g_mobile_platform_firmware:-

qualcomm:snapdragon_ar1_gen_1_platform_firmware:-

qualcomm:snapdragon_ar1\+_gen_1_platform_firmware:-

qualcomm:snapdragon_auto_5g_modem-rf_firmware:-

qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-

qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware:-

qualcomm:snapdragon_x32_5g_modem-rf_system_firmware:-

qualcomm:snapdragon_x35_5g_modem-rf_system_firmware:-

qualcomm:snapdragon_x53_5g_modem-rf_system_firmware:-

📊 CVSS Score

7.2

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack VectorP — Physical

Attack ComplexityL — Low / Local

Privileges RequiredH — High

User InteractionN — None / Network

ScopeC — Changed

ConfidentialityH — High

IntegrityH — High

AvailabilityH — High

📋 Quick Facts

Severity High

CVSS Score7.2

CWECWE-121

EPSS0.01%

Exploit No

Patch ✓ Yes

Published 2026-06-01

Source Feed nvd

🇸🇦 Saudi Risk Score

7.8

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

patch-available CWE-121

🏢 Vendor Advisories

🔗 https://docs.qualcomm.com/product/publicresources/se...

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

💬 Comments

Loading comments

CVE-2026-24085

💬 Comments

Introduce Yourself

Sign In Required