CVE-2026-24084: qualcomm, inc. snapdragon Insecure Security Identifier Mechanism

Vulnerability summary

CVE-2026-24084 is a high (CVSS 7.5) Insecure Security Identifier Mechanism vulnerability in qualcomm, inc. snapdragon. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.4% of scored vulnerabilities.

Timeline

1. 04-08-2026
   PublishedVulnerability first disclosed.
2. 04-08-2026
   Last modifiedVulnerability information updated.

Description

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

• CWE-1294Insecure Security Identifier MechanismThe System-on-Chip (SoC) implements a Security Identifier mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Identifiers are not correctly implemented.