This vulnerability (CVE-2026-24087) affects Qualcomm Snapdragon products and is caused by improper validation of syntactic correctness of input during the processing of fastboot OEM commands. The flaw results in memory corruption, which can compromise system confidentiality, integrity, and availability. The CVSS 3.1 base score is 7.2, indicating a high severity with attack vector requiring physical access (AV:P), low attack complexity, high privileges, no user interaction, and scope changed. No patch or official remediation level has been disclosed by Qualcomm as of the publication date.

Successful exploitation can lead to memory corruption, potentially allowing attackers with physical access and high privileges to compromise confidentiality, integrity, and availability of the affected device. The vulnerability affects the fastboot OEM command processing component of Snapdragon devices, which could result in severe system compromise if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users and administrators should monitor Qualcomm's advisories for updates. Until a patch is available, restricting physical access to devices and limiting the use of fastboot OEM commands to trusted personnel may reduce risk.