This vulnerability (CVE-2026-24084) affects multiple Qualcomm Snapdragon chipsets and related products. It is characterized by a weakness in the security identifier mechanism, specifically due to the UE failing to verify the consistency of its additional security capabilities when these capabilities are replayed. The CVSS 3.1 base score is 7.5, indicating high severity, with an attack vector of network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), high confidentiality impact (C:H), and no impact on integrity or availability (I:N, A:N). No known exploits are reported in the wild, and no official remediation or patch has been disclosed as of the published date.

An attacker could exploit this vulnerability remotely without authentication or user interaction to compromise the confidentiality of data processed by affected Qualcomm Snapdragon devices. There is no impact on integrity or availability. The flaw stems from the UE's failure to verify the consistency of additional security capabilities when replayed, potentially allowing unauthorized access to sensitive information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users and administrators should monitor Qualcomm's advisories for updates. Until a patch is available, consider applying any recommended temporary mitigations from Qualcomm if published. No specific mitigations are indicated in the current data.