This vulnerability (CVE-2026-24082) is classified as CWE-416 (Use After Free) and occurs in Qualcomm Snapdragon products. The issue arises from memory corruption caused by copying data from a source that has already been freed during the execution of a performance counter deselect operation. Affected products include numerous Snapdragon mobile platforms, modem-RF systems, and other Qualcomm hardware components. The CVSS v3.1 base score is 7.8, indicating high severity with local attack vector, low attack complexity, requiring low privileges and no user interaction, and impacts confidentiality, integrity, and availability. The vendor has not provided a patch or official remediation guidance yet.

Successful exploitation of this vulnerability could allow an attacker with local access and low privileges to cause memory corruption, potentially leading to arbitrary code execution or denial of service. The impact affects confidentiality, integrity, and availability of the affected systems. Given the broad range of affected Qualcomm Snapdragon platforms, this could impact many devices using these components. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users and administrators should monitor Qualcomm's advisories for updates. No vendor-provided mitigation or workaround information is currently available.