This vulnerability (CVE-2026-24074) is classified as CWE-787 (Out-of-bounds Write) affecting Qualcomm Snapdragon devices. The flaw arises from improper handling of data with large offset and length values that exceed buffer boundaries during copy operations, causing memory corruption. The CVSS 3.1 base score is 7.8, indicating high severity with local attack vector, low attack complexity, requiring low privileges and no user interaction. The impact includes high confidentiality, integrity, and availability loss. Affected versions include specific Qualcomm Snapdragon chipsets identified by model numbers such as IQX5121, QCM6490, SM6250, and others. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

Successful exploitation can result in memory corruption leading to potential full compromise of confidentiality, integrity, and availability of the affected device. The vulnerability requires local access with low privileges and no user interaction, making exploitation feasible in certain threat scenarios. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Qualcomm's advisories for updates. Until a fix is available, limit local access to trusted users and environments to reduce risk.