CVE-2026-24090 — HIGH (7.1)

Vulnerability Description

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Qualcomm	Snapdragon 460 Mobile Platform Firmware	-
Qualcomm	Snapdragon 460 Mobile Platform	-
Qualcomm	Snapdragon 4 Gen 2 Mobile Platform Firmware	-
Qualcomm	Snapdragon 4 Gen 2 Mobile Platform	-
Qualcomm	Snapdragon 4 Gen 1 Mobile Platform Firmware	-
Qualcomm	Snapdragon 4 Gen 1 Mobile Platform	-
Qualcomm	Smart Audio 400 Platform Firmware	-
Qualcomm	Smart Audio 400 Platform	-
Qualcomm	Sm8845P Firmware	-
Qualcomm	Sm8845P	-
Qualcomm	Sm8750P Firmware	-
Qualcomm	Sm8750P	-
Qualcomm	Sm8735P Firmware	-
Qualcomm	Sm8735P	-
Qualcomm	Sm8650Q Firmware	-
Qualcomm	Sm8650Q	-
Qualcomm	Sm8635P Firmware	-
Qualcomm	Sm8635P	-
Qualcomm	Sm8635 Firmware	-
Qualcomm	Sm8635	-

Related Weaknesses (CWE)

CWE-306

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulPatchVendor Advisory

FAQ

What is CVE-2026-24090?

CVE-2026-24090 is a vulnerability with a CVSS score of 7.1 (HIGH). Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

How severe is CVE-2026-24090?

CVE-2026-24090 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-24090?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Snapdragon 460 Mobile Platform Firmware, Qualcomm Snapdragon 460 Mobile Platform, Qualcomm Snapdragon 4 Gen 2 Mobile Platform Firmware, Qualcomm Snapdragon 4 Gen 2 Mobile Platform, Qualcomm Snapdragon 4 Gen 1 Mobile Platform Firmware.