This vulnerability (CVE-2026-24089) affects Qualcomm Snapdragon products and involves improper validation of syntactic correctness of input during fastboot command processing. Specifically, malformed or invalid input can cause memory corruption. The CVSS 3.1 base score is 7.2, reflecting high severity with partial attack vector (physical), low attack complexity, high privileges required, no user interaction, scope changed, and high impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability can result in memory corruption, potentially allowing an attacker with high privileges and physical access to compromise the confidentiality, integrity, and availability of the affected device. The scope of impact is changed, indicating that the vulnerability affects components beyond the initially vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict physical access to affected devices and avoid using fastboot commands with untrusted input.