CVE-2026-24079

8.1 HIGH

Published 2026-08-04 · Updated 2026-08-06

AI risk analysis

Summary: The flaw involves a cryptographic issue where malformed or missing authentication parameters can lead to security vulnerabilities, potentially allowing unauthorized access.
Exploitability: Exploitation requires specific malformed or missing authentication parameters, making it moderately difficult. Precondition is the presence of the affected firmware versions.
Blast radius: If exploited, the impact could be high, potentially leading to unauthorized access and data compromise across affected devices.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to the latest firmware version 1.2.345 or later.

auth-bypassfirmwarecryptographicmalformedmissing

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses

CWE-306

Vendors

qualcomm

Products

ar8035 firmware, ar8035, csra6620 firmware, csra6620, csra6640 firmware, csra6640, fastconnect 6200 firmware, fastconnect 6200, fastconnect 6700 firmware, fastconnect 6700, snapdragon 778g\+ 5g mobile platform firmware, snapdragon 778g\+ 5g mobile platform

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html Vendor Advisory

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.