This vulnerability (CVE-2026-24091) affects Qualcomm Snapdragon devices and is caused by improper validation of syntactic correctness of input during processing of fastboot commands. Specifically, malformed input can cause memory corruption, potentially allowing an attacker with high privileges to execute arbitrary code or cause denial of service. The CVSS 3.1 base score is 7.2, reflecting high impact on confidentiality, integrity, and availability, with attack vector requiring physical or local access (AV:P), low attack complexity, and no user interaction. No patch or official remediation level has been disclosed by Qualcomm as of the publication date.

Successful exploitation of this vulnerability can result in memory corruption leading to full compromise of the device's confidentiality, integrity, and availability. Given the nature of fastboot commands, exploitation likely requires privileged access to the device. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to fastboot interfaces and ensure only trusted users have privileged access to affected devices. Monitor Qualcomm's advisories for updates on patches or mitigations.