This vulnerability (CVE-2026-24076) in Qualcomm Snapdragon devices is a classic buffer overflow (CWE-120) caused by improper handling of registry values with incorrect types during direct queries. The issue leads to memory corruption, potentially impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 6.7, reflecting medium severity with local attack vector, low attack complexity, high privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. The affected products include a range of Qualcomm chipsets and components such as AQT1000, QCA series, QCM series, SM6250, WCD series, and WSA series. No vendor advisory or patch information is provided, and no known exploits have been reported.

Successful exploitation could result in memory corruption, leading to potential compromise of confidentiality, integrity, and availability of affected devices. The attack requires local access with high privileges and does not require user interaction. The medium severity score reflects significant but not critical risk under these conditions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation is currently documented, affected organizations should monitor Qualcomm advisories for updates. No specific mitigations are provided by the vendor at this time.