CVE-2026-24082 is a use-after-free vulnerability (CWE-416) in Qualcomm Snapdragon products that leads to memory corruption when copying data from a source that has already been freed during the execution of a performance counter deselect operation. This issue affects numerous Snapdragon platforms and related hardware components. The vulnerability is rated with a CVSS 3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating it requires local access with low attack complexity and privileges, and can result in high impact on confidentiality, integrity, and availability. As of the published date, no official patch or remediation level has been disclosed by Qualcomm, and no known exploits have been reported in the wild.

Successful exploitation of this use-after-free vulnerability can lead to memory corruption, potentially allowing an attacker with local access and low privileges to compromise confidentiality, integrity, and availability of the affected system. The high CVSS score reflects the potential for significant impact on the affected Snapdragon platforms. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been provided by Qualcomm, users should monitor Qualcomm's security advisories for updates. Until a patch is available, limiting local access and applying any available security controls to reduce the risk of exploitation is advisable.