CVE-2026-24085: Stack-based Buffer Overflow in Display
Memory Corruption when processing display command line information due to improper initialization of a variable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/abl/tianocore/edk2to a version that resolves this vulnerability.Fixed in SoCVersion:2026-06-05
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24085?
The severity of CVE-2026-24085 is rated as high with a score of 7.2.
How do I fix CVE-2026-24085?
You can fix CVE-2026-24085 by applying the available patch from Qualcomm.
What causes CVE-2026-24085?
CVE-2026-24085 is caused by memory corruption due to improper initialization of a variable when processing display command line information.
Which firmware versions are affected by CVE-2026-24085?
CVE-2026-24085 affects several Qualcomm firmware versions including Qca6391, Qca6564au, Qca6574, Qca6574a, Qca6574au, Qca6584au, and Qca6595.
What type of vulnerability is CVE-2026-24085?
CVE-2026-24085 is classified as a stack-based buffer overflow vulnerability.