Vulnerabilities ›

CVE-2026-24089

High

CWE-1286 — Weakness Type

                    Published: Jun 1, 2026                      ·  Modified: Jun 8, 2026                      ·  Source: NVD                

CVSS v3

7.2

🔗 NVD Official

📄 Description (English)

Memory corruption while processing fastboot commands with invalid input.

🤖 AI Executive Summary

CVE-2026-24089 is a high-severity memory corruption vulnerability in Qualcomm firmware affecting multiple chipsets used in networking and IoT devices. The vulnerability exists in fastboot command processing when handling invalid input, potentially allowing local attackers to cause denial of service or execute arbitrary code. This poses significant risk to Saudi telecommunications infrastructure and government IoT deployments that rely on affected Qualcomm chipsets.

📄 Description (Arabic)

🤖 AI Intelligence Analysis Analyzed: Jun 6, 2026 18:16

🇸🇦 Saudi Arabia Impact Assessment

This vulnerability primarily impacts: (1) Telecom sector (STC, Mobily, Zain) — affecting network infrastructure equipment and 5G base stations using affected Qualcomm chipsets; (2) Government agencies (NCA, CITC) — IoT and network monitoring systems; (3) Energy sector (Saudi Aramco) — industrial IoT and SCADA systems; (4) Healthcare — medical IoT devices and hospital network infrastructure. Local access requirement limits exposure but is critical for supply chain and manufacturing environments.

🏢 Affected Saudi Sectors

Telecommunications Government Energy Healthcare Manufacturing IoT Infrastructure

🎯 MITRE ATT&CK Techniques

T1542.001 - Firmware Corruption T1542.005 - Bootkit T1499.004 - Application Exhaustion Flood T1561.002 - Disk Structure Wipe T1529 - System Shutdown/Reboot

⚖️ Saudi Risk Score (AI)

7.8

/ 10.0

🔧 Remediation Steps (English)

IMMEDIATE ACTIONS:

1. Identify all devices using affected Qualcomm chipsets (AR8031, AR8035, Cologne, CQ7790, CQ8725S, QMP1000, QMP2001, QPA1083BD, QPA1086BD, QRB5165N) in your infrastructure

2. Restrict physical and local network access to affected devices

3. Disable fastboot functionality where not operationally required

4. Implement network segmentation to isolate affected devices



PATCHING GUIDANCE:

1. Contact Qualcomm or your device manufacturer for firmware updates addressing CVE-2026-24089

2. Test patches in non-production environments first

3. Schedule firmware updates during maintenance windows with rollback procedures

4. Verify patch application using device firmware verification tools



COMPENSATING CONTROLS (if patch unavailable):

1. Implement strict physical access controls to devices

2. Disable USB debugging and fastboot interfaces via firmware settings

3. Monitor system logs for fastboot command attempts

4. Implement host-based intrusion detection on connected systems



DETECTION RULES:

1. Monitor for fastboot protocol traffic on ports 5037-5039

2. Alert on invalid fastboot command sequences

3. Track firmware modification attempts

4. Monitor for unexpected device reboots or crashes

5. Log all local serial/USB connections to affected devices

🔧 خطوات المعالجة (العربية)

الإجراءات الفورية:

1. تحديد جميع الأجهزة التي تستخدم رقاقات Qualcomm المتأثرة (AR8031, AR8035, Cologne, CQ7790, CQ8725S, QMP1000, QMP2001, QPA1083BD, QPA1086BD, QRB5165N) في البنية التحتية الخاصة بك

2. تقييد الوصول المادي والمحلي للأجهزة المتأثرة

3. تعطيل وظيفة fastboot حيث لا تكون مطلوبة تشغيلياً

4. تنفيذ تقسيم الشبكة لعزل الأجهزة المتأثرة

إرشادات التصحيح:

1. التواصل مع Qualcomm أو مصنع الجهاز للحصول على تحديثات البرامج الثابتة

2. اختبار التصحيحات في بيئات غير الإنتاج أولاً

3. جدولة تحديثات البرامج الثابتة خلال نوافذ الصيانة مع إجراءات التراجع

4. التحقق من تطبيق التصحيح باستخدام أدوات التحقق من البرامج الثابتة

الضوابط البديلة (إذا لم يكن التصحيح متاحاً):

1. تنفيذ ضوابط وصول مادية صارمة للأجهزة

2. تعطيل واجهات USB والتصحيح السريع عبر إعدادات البرامج الثابتة

3. مراقبة سجلات النظام لمحاولات أوامر fastboot

4. تنفيذ كشف الاختراق على مستوى المضيف على الأنظمة المتصلة

قواعد الكشف:

1. مراقبة حركة بروتوكول fastboot على المنافذ 5037-5039

2. التنبيه على تسلسلات أوامر fastboot غير الصحيحة

3. تتبع محاولات تعديل البرامج الثابتة

4. مراقبة إعادة تشغيل الأجهزة غير المتوقعة أو الأعطال

5. تسجيل جميع الاتصالات المحلية بالمسلسل/USB للأجهزة المتأثرة

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

ECC 2024 A.8.1 - Asset Management and Inventory ECC 2024 A.8.2 - Firmware and Software Management ECC 2024 A.12.2 - Change Management ECC 2024 A.12.6 - Management of Technical Vulnerabilities

🔵 SAMA CSF

ID.AM-1 - Physical devices and systems inventory PR.IP-3 - Configuration management PR.MA-2 - Address identified security weaknesses DE.CM-8 - Vulnerability scans

🟡 ISO 27001:2022

A.8.1.1 - Inventory of assets A.8.1.2 - Ownership of assets A.8.1.3 - Acceptable use of assets A.8.1.4 - Return of assets A.12.2.1 - Change management A.12.6.1 - Management of technical vulnerabilities

🔗 References & Sources 1

🔗

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html

product-security@qualcomm.com

Patch Vendor Advisory

📦 Affected Products / CPE 50 entries

qualcomm:ar8031_firmware:-

qualcomm:ar8035_firmware:-

qualcomm:cologne_firmware:-

qualcomm:cq7790_firmware:-

qualcomm:cq8725s_firmware:-

qualcomm:qmp1000_firmware:-

qualcomm:qmp2001_firmware:-

qualcomm:qpa1083bd_firmware:-

qualcomm:qpa1086bd_firmware:-

qualcomm:qrb5165n_firmware:-

qualcomm:qru1032_firmware:-

qualcomm:qualcomm_dragonwing_qru100_platform_firmware:-

qualcomm:qualcomm_dragonwing_x100_accelerator_card_firmware:-

qualcomm:video_collaboration_vc1_platform_firmware:-

qualcomm:video_collaboration_vc3_platform_firmware:-

qualcomm:video_collaboration_vc5_platform_firmware:-

qualcomm:qxm1083_firmware:-

qualcomm:qxm1086_firmware:-

qualcomm:qxm1093_firmware:-

qualcomm:qxm1094_firmware:-

qualcomm:qxm1095_firmware:-

qualcomm:qxm1096_firmware:-

qualcomm:robotics_rb5_platform_firmware:-

qualcomm:sa510m_firmware:-

qualcomm:sa6155p_firmware:-

qualcomm:sa7255p_firmware:-

qualcomm:sa7775p_firmware:-

qualcomm:sa8155p_firmware:-

qualcomm:sa8195p_firmware:-

qualcomm:sa8255p_firmware:-

qualcomm:sa8295p_firmware:-

qualcomm:sa8620p_firmware:-

qualcomm:sa8770p_firmware:-

qualcomm:sa9000p_firmware:-

qualcomm:sar1165p_firmware:-

qualcomm:sc8380xp_firmware:-

qualcomm:sd662_firmware:-

qualcomm:sd865_5g_firmware:-

qualcomm:sdr753_firmware:-

qualcomm:sdx81_firmware:-

qualcomm:sm4850_firmware:-

qualcomm:sm4850p_firmware:-

qualcomm:sm6225p_firmware:-

qualcomm:sm6450p_firmware:-

qualcomm:sm6475p_firmware:-

qualcomm:cq8750m_firmware:-

qualcomm:csra6620_firmware:-

qualcomm:csra6640_firmware:-

qualcomm:fastconnect_6200_firmware:-

qualcomm:fastconnect_6700_firmware:-

📊 CVSS Score

7.2

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack VectorP — Physical

Attack ComplexityL — Low / Local

Privileges RequiredH — High

User InteractionN — None / Network

ScopeC — Changed

ConfidentialityH — High

IntegrityH — High

AvailabilityH — High

📋 Quick Facts

Severity High

CVSS Score7.2

CWECWE-1286

EPSS0.02%

Exploit No

Patch ✓ Yes

Published 2026-06-01

Source Feed nvd

🇸🇦 Saudi Risk Score

7.8

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

patch-available CWE-1286

🏢 Vendor Advisories

🔗 https://docs.qualcomm.com/product/publicresources/se...

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

CVE-2026-24089

Introduce Yourself

Sign In Required