CVE-2026-24078: qualcomm, inc. snapdragon

Vulnerability summary

CVE-2026-24078 is a medium (CVSS 6.5) vulnerability in qualcomm, inc. snapdragon. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.4% of scored vulnerabilities.

Timeline

1. 04-08-2026
   PublishedVulnerability first disclosed.
2. 04-08-2026
   Last modifiedVulnerability information updated.

Description

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

• CWE-359Exposure of Private Personal Information to an Unauthorized ActorThe product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.