Back to the CVE list
CVE-2026-24080

Buffer Copy Without Checking Size of Input in Biometrics

CVSS score

7.8

EPSS probability

%0.1

Risk score

0.0

Published

2 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-24080 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Memory Corruption when handling malformed request parameters in the fingerprint TA.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-24080 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Qualcomm, Inc.Snapdragon View
2qualcommqam8295p firmware View
3qualcommqam8295p View
4qualcommqca6574au firmware View
5qualcommqca6574au View
6qualcommqca6595au firmware View
7qualcommqca6595au View
8qualcommqca6678aq firmware View
9qualcommqca6678aq View
10qualcommqca6696 firmware View
11qualcommqca6696 View
12qualcommsa6145p firmware View
13qualcommsa6145p View
14qualcommsa6150p firmware View
15qualcommsa6150p View
16qualcommsa6155p firmware View
17qualcommsa6155p View
18qualcommsa8145p firmware View
19qualcommsa8145p View
20qualcommsa8150p firmware View
21qualcommsa8150p View
22qualcommsa8155p firmware View
23qualcommsa8155p View
24qualcommsa8195p firmware View
25qualcommsa8195p View
26qualcommsa8255p firmware View
27qualcommsa8255p View
28qualcommsa8295p firmware View
29qualcommsa8295p View
30qualcommsa8540p firmware View
31qualcommsa8540p View
32qualcommsa9000p firmware View
33qualcommsa9000p View
34qualcommsw6100 firmware View
35qualcommsw6100 View
36qualcommsw6100p firmware View
37qualcommsw6100p View
38qualcommthemisto firmware View
39qualcommthemisto View
40qualcommwcd9378c firmware View
41qualcommwcd9378c View
42qualcommwsa8840 firmware View
43qualcommwsa8840 View
44qualcommwsa8845 firmware View
45qualcommwsa8845 View
46qualcommwsa8845h firmware View
47qualcommwsa8845h View
48qualcommx2000077 firmware View
49qualcommx2000077 View
50qualcommx2000086 firmware View
51qualcommx2000086 View
52qualcommx2000090 firmware View
53qualcommx2000090 View
54qualcommx2000092 firmware View
55qualcommx2000092 View
56qualcommx2000094 firmware View
57qualcommx2000094 View
58qualcommxg101002 firmware View
59qualcommxg101002 View
60qualcommxg101032 firmware View
61qualcommxg101032 View
62qualcommxg101039 firmware View
63qualcommxg101039 View
64qualcommcologne firmware View
65qualcommcologne View
66qualcommfastconnect 6700 firmware View
67qualcommfastconnect 6700 View
68qualcommfastconnect 6900 firmware View
69qualcommfastconnect 6900 View
70qualcommfastconnect 7800 firmware View
71qualcommfastconnect 7800 View
72qualcommqam8255p firmware View
73qualcommqam8255p View
Total affected vendors: 2|Products: 73

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.8CVSS V3_1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE CNA
7.8CVSS V31HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-24080 is associated with the following CWEs:

CWE-120: Common Weakness Enumeration Entry CWE-120

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-24080 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.htmlvendor-advisory

CVSS Vector Radar Chart

7.8 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

QI
Qualcomm, Inc. logo
Qualcomm, Inc.
Q
qualcomm logo
qualcomm

Weakness Type (CWE & CAPEC)

CWE-120

Similar Vulnerabilities

6.5
CVE-2020-3702Vulnerability in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking
QI
Qualcomm, Inc. logo
VendorQualcomm, Inc.ProductSnapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking+27 etkilenen
Patch status unknownEPSS %06 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-24080"
CVE-2026-24080 · Buffer Copy Without Checking Size of Input…