CVE-2026-24091: Improper Validation of Syntactic Correctness of Input in Display
Memory corruption while processing fastboot commands with improperly formatted input.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Implement and enable strict validation of syntactic correctness for all input processed by the display/fastboot command handler. Reject or sanitize improperly formatted fastboot commands to prevent memory corruption when parsing input.
Display (fastboot command processor) syntactic_input_validation = enabled/strict
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24091?
The severity of CVE-2026-24091 is rated high with a score of 7.2.
How do I fix CVE-2026-24091?
CVE-2026-24091 can be fixed by applying the available patch.
What causes CVE-2026-24091?
CVE-2026-24091 is caused by improper validation of syntactic correctness of input in the processing of fastboot commands.
What impact does CVE-2026-24091 have on devices?
CVE-2026-24091 can lead to memory corruption, potentially allowing for denial of service or code execution.
Which software is affected by CVE-2026-24091?
CVE-2026-24091 affects Google Android fastboot and several Qualcomm firmware versions.