1. Home
  2. CVE Database
  3. CVE-2026-24077
MEDIUM · 6.5

CVE-2026-24077

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.

Vulnerability Description

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
QualcommAqt1000 Firmware-
QualcommAqt1000-
QualcommAr8035 Firmware-
QualcommAr8035-
QualcommCsra6620 Firmware-
QualcommCsra6620-
QualcommCsra6640 Firmware-
QualcommCsra6640-
QualcommFastconnect 6200 Firmware-
QualcommFastconnect 6200-
QualcommWcd9395 Firmware-
QualcommWcd9395-
QualcommWcn3910 Firmware-
QualcommWcn3910-
QualcommWcn3950 Firmware-
QualcommWcn3950-
QualcommWcn3980 Firmware-
QualcommWcn3980-
QualcommWcn3988 Firmware-
QualcommWcn3988-

Related Weaknesses (CWE)

CWE-191

References

FAQ

What is CVE-2026-24077?

CVE-2026-24077 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.

How severe is CVE-2026-24077?

CVE-2026-24077 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-24077?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Aqt1000 Firmware, Qualcomm Aqt1000, Qualcomm Ar8035 Firmware, Qualcomm Ar8035, Qualcomm Csra6620 Firmware.