CVE-2026-24075: Buffer Over-read in Qualcomm IPC
Published Sep 17, 2026
·Updated
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
Event History
Sep 17, 2026
CVE Published
via MITRE·04:11 AM
Data Sourced
via MITRE·04:11 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
Exploitation requires local access and low privileges. No user interaction is required.
2
Can this be exploited remotely?
The provided CVSS vector lists the attack vector as local, so remote exploitation is not indicated.
3
What could a successful exploit affect?
The reported impact is high for confidentiality, integrity, and availability. The issue involves concurrent IOCTL requests to the device control handler, where improper synchronization can lead to memory corruption.