Vulnerabilities ›

CVE-2026-24088

High

CWE-306 — Weakness Type

                    Published: Jun 1, 2026                      ·  Modified: Jun 8, 2026                      ·  Source: NVD                

CVSS v3

8.2

🔗 NVD Official

📄 Description (English)

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.

🤖 AI Executive Summary

CVE-2026-24088 is a cryptographic vulnerability in partition processing that enables unauthorized write access and custom bootloader installation. This high-severity flaw (CVSS 8.2) could allow attackers to compromise system integrity and gain elevated privileges.

📄 Description (Arabic)

تتعلق هذه الثغرة بضعف تشفيري في معالجة أقسام التخزين يسمح بالوصول غير المصرح للكتابة. يمكن للمهاجمين استغلال هذا الضعف لتثبيت محمل إقلاع مخصص والتحكم الكامل في النظام. التأثير يشمل كسر السلامة الأمنية للجهاز والوصول إلى البيانات الحساسة.

🤖 ملخص تنفيذي (AI)

This vulnerability involves a cryptographic weakness in partition handling that permits unauthorized write operations and loading of malicious bootloaders. Attackers exploiting this flaw could achieve system compromise and privilege escalation on affected devices.

🤖 AI Intelligence Analysis Analyzed: Jun 6, 2026 18:10

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: high

🏢 Affected Saudi Sectors

government energy banking telecom

🎯 MITRE ATT&CK Techniques

T1542.001 T1542.005 T1547.003

⚖️ Saudi Risk Score (AI)

8.0

/ 10.0

🔧 Remediation Steps (English)

Immediately apply security patches from the vendor. Verify bootloader integrity using secure boot mechanisms. Implement firmware update controls and monitor for unauthorized partition modifications. Restrict physical access to affected devices and enable cryptographic verification of all boot components.

🔧 خطوات المعالجة (العربية)

طبق تصحيحات الأمان من المورد فوراً. تحقق من سلامة محمل الإقلاع باستخدام آليات الإقلاع الآمن. طبق عناصر تحكم تحديث البرامج الثابتة ومراقبة التعديلات غير المصرح بها. قيد الوصول المادي وفعّل التحقق التشفيري من جميع مكونات الإقلاع.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

2.1.1 2.2.1 3.1.1

🔵 SAMA CSF

ID.SC-1 PR.DS-1 PR.DS-2

🟡 ISO 27001:2022

A.10.1.1 A.14.1.1 A.14.2.1

🔗 References & Sources 1

🔗

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

product-security@qualcomm.com

Patch Vendor Advisory

📦 Affected Products / CPE 50 entries

qualcomm:ar9380_firmware:-

qualcomm:csr8811_firmware:-

qualcomm:fastconnect_6200_firmware:-

qualcomm:fastconnect_6700_firmware:-

qualcomm:fastconnect_6900_firmware:-

qualcomm:fastconnect_7800_firmware:-

qualcomm:g1_gen_1_firmware:-

qualcomm:g2_gen_1_firmware:-

qualcomm:g3x_gen_2_firmware:-

qualcomm:immersive_home_214_platform_firmware:-

qualcomm:immersive_home_216_platform_firmware:-

qualcomm:immersive_home_316_platform_firmware:-

qualcomm:immersive_home_318_platform_firmware:-

qualcomm:ipq4018_firmware:-

qualcomm:ipq4019_firmware:-

qualcomm:ipq4028_firmware:-

qualcomm:ipq4029_firmware:-

qualcomm:ipq5010_firmware:-

qualcomm:ipq6010_firmware:-

qualcomm:ipq6018_firmware:-

qualcomm:ipq8064_firmware:-

qualcomm:ipq8065_firmware:-

qualcomm:ipq8068_firmware:-

qualcomm:ipq8070_firmware:-

qualcomm:ipq8076_firmware:-

qualcomm:ipq8078_firmware:-

qualcomm:iq-9075_firmware:-

qualcomm:kalpeni_firmware:-

qualcomm:lemans_au_lgit_firmware:-

qualcomm:lemansau_firmware:-

qualcomm:mdm9628_firmware:-

qualcomm:milos_firmware:-

qualcomm:milos_iot_firmware:-

qualcomm:molokai_firmware:-

qualcomm:netrani_firmware:-

qualcomm:networking_pro_1200_platform_firmware:-

qualcomm:networking_pro_1210_platform_firmware:-

qualcomm:networking_pro_1610_platform_firmware:-

qualcomm:networking_pro_400_platform_firmware:-

qualcomm:networking_pro_600_platform_firmware:-

qualcomm:networking_pro_610_platform_firmware:-

qualcomm:networking_pro_800_platform_firmware:-

qualcomm:networking_pro_810_platform_firmware:-

qualcomm:orne_firmware:-

qualcomm:palawan25_firmware:-

qualcomm:snapdragon_480_5g_mobile_platform_firmware:-

qualcomm:snapdragon_480\+_5g_mobile_platform_firmware:-

qualcomm:snapdragon_6_gen_1_mobile_platform_firmware:-

qualcomm:snapdragon_6_gen_3_mobile_platform_firmware:-

qualcomm:snapdragon_6_gen_4_mobile_platform_firmware:-

📊 CVSS Score

8.2

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack VectorL — Low / Local

Attack ComplexityL — Low / Local

Privileges RequiredH — High

User InteractionN — None / Network

ScopeC — Changed

ConfidentialityH — High

IntegrityH — High

AvailabilityH — High

📋 Quick Facts

Severity High

CVSS Score8.2

CWECWE-306

EPSS0.01%

Exploit No

Patch ✓ Yes

Published 2026-06-01

Source Feed nvd

🇸🇦 Saudi Risk Score

8.0

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

patch-available CWE-306

🏢 Vendor Advisories

🔗 https://docs.qualcomm.com/product/publicresources/se...

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

CVE-2026-24088

Introduce Yourself

Sign In Required