{"id":"CVE-2026-24084","published":"2026-08-04T16:16:24.370","lastModified":"2026-08-06T18:35:56.540","description":"Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-1294"],"vendors":["qualcomm"],"products":["sdx57m firmware","sdx57m","sdx61 firmware","sdx61","sdx71m firmware","sdx71m","sm6650p firmware","sm6650p","sm7325p firmware","sm7325p","sm7435 firmware","sm7435"],"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows attackers to exploit weak UE configuration checks, potentially leading to unauthorized access or data compromise without proper verification of security capabilities.","exploitability":"Exploitation requires an attacker to manipulate UE additional security capabilities and may be moderately difficult due to the need for precise timing and capability manipulation.","blast_radius":"If exploited, this could impact a wide range of devices using affected Qualcomm firmware, leading to significant data or system integrity issues.","remediation":"Update all affected Qualcomm firmware to the latest versions that address the configuration flaw.","tags":["firmware","security-capabilities","ue"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T06:54:03.339Z"}}