This vulnerability (CVE-2026-24090) affects Qualcomm Snapdragon products and is classified under CWE-306 (Missing Authentication for Critical Function). It arises from a cryptographic weakness in handling partition table entries, enabling unauthorized actors with limited privileges to modify the device boot flow. The CVSS 3.1 vector indicates the attack requires local access with low complexity and privileges, no user interaction, and impacts confidentiality and integrity with high severity. The vendor has published the vulnerability but has not provided a remediation level or patch information yet.

Successful exploitation could allow an attacker with local access and low privileges to alter the boot process of affected Snapdragon devices, potentially compromising system confidentiality and integrity. This could lead to unauthorized code execution or persistent compromise at boot time. There is no reported impact on system availability. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation level has been provided by Qualcomm, users and administrators should monitor for vendor updates. Until a patch is available, limit local access to trusted users and consider additional device security controls to prevent unauthorized local interactions.