CVE-2026-24075
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.09%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
- CVSS 3.1
- 7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.09% probability · 0th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-126
- Affected
- qualcomm/wsa8845h firmware · qualcomm/aqt1000 firmware · qualcomm/cologne firmware · qualcomm/fastconnect 6200 firmware · qualcomm/fastconnect 6700 firmware · qualcomm/fastconnect 6800 firmware · qualcomm/fastconnect 6900 firmware · qualcomm/fastconnect 7800 firmware · qualcomm/iqx5121 firmware · qualcomm/iqx7181 firmware · qualcomm/qca0000 firmware · qualcomm/qca6391 firmware · qualcomm/qca6420 firmware · qualcomm/qca6430 firmware · qualcomm/qcm5430 firmware · qualcomm/qcm6490 firmware · qualcomm/video collaboration vc3 platform firmware · qualcomm/sc8380xp firmware · qualcomm/sm6250 firmware · qualcomm/snapdragon 7c compute platform firmware · +23 more
- Source
- product-security@qualcomm.com
EPSS 0.1% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.