Vulnerabilities ›

CVE-2026-24087

High

CWE-1286 — Weakness Type

                    Published: Jun 1, 2026                      ·  Modified: Jun 8, 2026                      ·  Source: NVD                

CVSS v3

7.2

🔗 NVD Official

📄 Description (English)

Memory corruption while processing fastboot OEM commands.

🤖 AI Executive Summary

CVE-2026-24087 involves memory corruption vulnerabilities in fastboot OEM command processing that could allow attackers to execute arbitrary code or cause denial of service. This vulnerability affects device bootloader implementations and poses significant risks to mobile device security.

📄 Description (Arabic)

يتعلق هذا الضعف بتلف الذاكرة في معالج أوامر fastboot OEM الذي قد يسمح بتنفيذ كود عشوائي أو إنكار الخدمة. يؤثر على برامج التمهيد للأجهزة المحمولة والأنظمة المدمجة المستخدمة في المؤسسات السعودية.

🤖 ملخص تنفيذي (AI)

This CVE describes memory corruption flaws in fastboot OEM command handling that may enable arbitrary code execution or system crashes. The vulnerability impacts bootloader security on mobile devices used throughout Saudi Arabia.

🤖 AI Intelligence Analysis Analyzed: Jun 6, 2026 18:11

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: high

🏢 Affected Saudi Sectors

telecom government healthcare

🎯 MITRE ATT&CK Techniques

T1542.001 T1542.003 T1203

⚖️ Saudi Risk Score (AI)

7.0

/ 10.0

🔧 Remediation Steps (English)

Update device firmware and bootloader to patched versions immediately. Implement strict input validation for fastboot OEM commands. Disable fastboot OEM commands in production environments where not required. Monitor and restrict physical access to devices in fastboot mode.

🔧 خطوات المعالجة (العربية)

قم بتحديث البرامج الثابتة وبرنامج التمهيد إلى الإصدارات المصححة فوراً. طبق التحقق الصارم من صحة المدخلات لأوامر fastboot OEM. عطل أوامر fastboot OEM في بيئات الإنتاج حيث لا تكون مطلوبة. راقب وقيد الوصول الفعلي للأجهزة في وضع fastboot.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

4.2.1 4.3.1

🔵 SAMA CSF

ID.AM-2 PR.PT-1

🟡 ISO 27001:2022

A.12.2.1 A.14.2.1

🔗 References & Sources 1

🔗

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

product-security@qualcomm.com

Patch Vendor Advisory

📦 Affected Products / CPE 50 entries

qualcomm:ar8031_firmware:-

qualcomm:ar8035_firmware:-

qualcomm:cologne_firmware:-

qualcomm:cq7790_firmware:-

qualcomm:cq8725s_firmware:-

qualcomm:qpa1083bd_firmware:-

qualcomm:qpa1086bd_firmware:-

qualcomm:qrb5165n_firmware:-

qualcomm:qru1032_firmware:-

qualcomm:qualcomm_dragonwing_qru100_platform_firmware:-

qualcomm:qualcomm_dragonwing_x100_accelerator_card_firmware:-

qualcomm:video_collaboration_vc1_platform_firmware:-

qualcomm:video_collaboration_vc3_platform_firmware:-

qualcomm:video_collaboration_vc5_platform_firmware:-

qualcomm:qxm1083_firmware:-

qualcomm:qxm1086_firmware:-

qualcomm:qxm1093_firmware:-

qualcomm:qxm1094_firmware:-

qualcomm:qxm1095_firmware:-

qualcomm:qxm1096_firmware:-

qualcomm:robotics_rb5_platform_firmware:-

qualcomm:sa510m_firmware:-

qualcomm:sa6155p_firmware:-

qualcomm:sa7255p_firmware:-

qualcomm:sa7775p_firmware:-

qualcomm:sa8155p_firmware:-

qualcomm:sa8195p_firmware:-

qualcomm:sa8255p_firmware:-

qualcomm:sa8295p_firmware:-

qualcomm:sa8620p_firmware:-

qualcomm:sa8770p_firmware:-

qualcomm:sa9000p_firmware:-

qualcomm:sar1165p_firmware:-

qualcomm:sc8380xp_firmware:-

qualcomm:sd662_firmware:-

qualcomm:sd865_5g_firmware:-

qualcomm:sdr753_firmware:-

qualcomm:sdx81_firmware:-

qualcomm:sm4850_firmware:-

qualcomm:sm4850p_firmware:-

qualcomm:sm6225p_firmware:-

qualcomm:sm6450p_firmware:-

qualcomm:sm6475p_firmware:-

qualcomm:sm6475q_firmware:-

qualcomm:sm6650p_firmware:-

qualcomm:cq8750m_firmware:-

qualcomm:csra6620_firmware:-

qualcomm:csra6640_firmware:-

qualcomm:fastconnect_6200_firmware:-

qualcomm:fastconnect_6700_firmware:-

📊 CVSS Score

7.2

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack VectorP — Physical

Attack ComplexityL — Low / Local

Privileges RequiredH — High

User InteractionN — None / Network

ScopeC — Changed

ConfidentialityH — High

IntegrityH — High

AvailabilityH — High

📋 Quick Facts

Severity High

CVSS Score7.2

CWECWE-1286

EPSS0.02%

Exploit No

Patch ✓ Yes

Published 2026-06-01

Source Feed nvd

🇸🇦 Saudi Risk Score

7.0

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

patch-available CWE-1286

🏢 Vendor Advisories

🔗 https://docs.qualcomm.com/product/publicresources/se...

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

CVE-2026-24087

Introduce Yourself

Sign In Required