This vulnerability (CVE-2026-24079) is classified as CWE-306: Missing Authentication for Critical Function. It occurs in Qualcomm Snapdragon products when processing registration requests that have malformed or missing authentication parameters, resulting in a cryptographic issue. The CVSS 3.1 base score is 8.1 (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N), indicating that an attacker with adjacent network access can exploit this vulnerability without privileges or user interaction to compromise confidentiality and integrity. The affected products include a wide range of Qualcomm Snapdragon chipsets and related hardware identified by specific model numbers. As of the published date, there is no vendor advisory or patch available, and no known exploits in the wild have been reported.

Successful exploitation of this vulnerability allows an attacker with adjacent network access to bypass authentication controls on critical functions related to registration requests. This can lead to a complete compromise of confidentiality and integrity of the affected system components. Availability is not impacted. The vulnerability affects multiple Snapdragon hardware versions, potentially impacting devices using these chipsets.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided by Qualcomm at this time, monitoring vendor communications for updates is recommended. No specific mitigations are documented in the available data.