CVE-2026-24074

Out-of-bounds Write in Video

State: Published
Severity: 7.8 High
Published: Sep 17, 2026
Updated: Sep 17, 2026
Reserved: Jan 21, 2026

Description

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	CologneAffected FastConnect 6200Affected FastConnect 6700Affected FastConnect 6900Affected FastConnect 7800Affected IQX5121Affected IQX7181Affected QCA0000Affected QCM5430Affected QCM6490Affected Qualcomm Video Collaboration VC3 PlatformAffected SC8380XPAffected SM6250Affected Snapdragon 7c Compute PlatformAffected Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"Affected Snapdragon 7c+ Gen 3 ComputeAffected Snapdragon X2 EliteAffected WCD9370Affected WCD9375Affected WCD9378CAffected WCD9380Affected WCD9385Affected WSA8840Affected WSA8845Affected WSA8845HAffected

Product

Versions

SnapdragonQualcomm, Inc.

CologneAffected
FastConnect 6200Affected
FastConnect 6700Affected
FastConnect 6900Affected
FastConnect 7800Affected
IQX5121Affected
IQX7181Affected
QCA0000Affected
QCM5430Affected
QCM6490Affected
Qualcomm Video Collaboration VC3 PlatformAffected
SC8380XPAffected
SM6250Affected
Snapdragon 7c Compute PlatformAffected
Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"Affected
Snapdragon 7c+ Gen 3 ComputeAffected
Snapdragon X2 EliteAffected
WCD9370Affected
WCD9375Affected
WCD9378CAffected
WCD9380Affected
WCD9385Affected
WSA8840Affected
WSA8845Affected
WSA8845HAffected

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.