This vulnerability (CVE-2026-24084) affects multiple Qualcomm Snapdragon chipsets and involves a weakness in the security identifier mechanism. Specifically, the User Equipment fails to verify the consistency of its additional security capabilities when these capabilities are replayed, leading to a potential security bypass. The CVSS 3.1 base score is 7.5 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, and high confidentiality impact. No official patch or remediation level has been provided by the vendor at this time, and no known exploits are reported in the wild.

The vulnerability allows an attacker to exploit the weak verification of security capabilities, potentially leading to unauthorized access to sensitive information (high confidentiality impact). There is no impact on integrity or availability reported. The attack can be performed remotely without privileges or user interaction, increasing the risk of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users and administrators should monitor Qualcomm's advisories for updates. Until a patch is available, consider limiting exposure of affected devices to untrusted networks if possible.