← Back to search

CVE-2026-24080

7.8 HIGH

Published 2026-08-04 · Updated 2026-08-06

AI risk analysis

Summary
The flaw involves memory corruption due to improper handling of malformed request parameters in the fingerprint TA, which could lead to arbitrary code execution or system crashes.
Exploitability
Exploitation requires the attacker to send a malformed request to the fingerprint TA, which is relatively straightforward given the public details.
Blast radius
If exploited, this flaw could allow an attacker to gain full control over the affected devices or cause them to crash, leading to service disruptions.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to the firmware version 1.0.23 or later.
memory-corruptionfirmwareqca

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Memory Corruption when handling malformed request parameters in the fingerprint TA.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-120

Vendors

qualcomm

Products

qam8295p firmware, qam8295p, qca6574au firmware, qca6574au, qca6595au firmware, qca6595au, qca6678aq firmware, qca6678aq, qca6696 firmware, qca6696, sa6145p firmware, sa6145p

References

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.