This vulnerability (CVE-2026-24091) affects Qualcomm Snapdragon products and is caused by improper validation of syntactic correctness of input during processing of fastboot commands. Specifically, memory corruption occurs when the input is improperly formatted. The CVSS 3.1 base score is 7.2, indicating high severity, with attack vector requiring physical access (AV:P), low attack complexity (AC:L), high privileges (PR:H), no user interaction (UI:N), and scope changed (S:C). The impact includes high confidentiality, integrity, and availability impact. No patch or remediation level is currently documented, and no exploits are known in the wild.

Successful exploitation of this vulnerability can result in memory corruption, potentially allowing an attacker with physical access and high privileges to compromise the device's confidentiality, integrity, and availability. The CVSS vector indicates a critical impact on all security properties, but exploitation requires physical presence and elevated privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published. Until a patch is available, limit physical access to affected devices and monitor for vendor updates.