{"id":"CVE-2026-24075","title":"Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.","summary":"Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-126"],"vendor":"Qualcomm, Inc.","product":"Snapdragon","affected":["Snapdragon AQT1000","Snapdragon Cologne","Snapdragon FastConnect 6200","Snapdragon FastConnect 6700","Snapdragon FastConnect 6800","Snapdragon FastConnect 6900","Snapdragon FastConnect 7800","Snapdragon IQX5121","Snapdragon IQX7181","Snapdragon QCA0000","Snapdragon QCA6391","Snapdragon QCA6420","Snapdragon QCA6430","Snapdragon QCM5430","Snapdragon QCM6490","Snapdragon Qualcomm Video Collaboration VC3 Platform","Snapdragon SC8380XP","Snapdragon SM6250","Snapdragon Snapdragon 7c Compute Platform","Snapdragon Snapdragon 7c Gen 2 Compute Platform \"Rennell Pro\"","Snapdragon Snapdragon 7c+ Gen 3 Compute","Snapdragon Snapdragon 8c Compute Platform \"Poipu Lite\"","Snapdragon Snapdragon 8c Compute Platform (SC8180XP-AD) \"Poipu Lite\"","Snapdragon Snapdragon 8cx Compute Platform","Snapdragon Snapdragon 8cx Compute Platform \"Poipu Pro\"","Snapdragon Snapdragon 8cx Gen 2 5G Compute Platform","Snapdragon Snapdragon 8cx Gen 2 5G Compute Platform \"Poipu Pro\"","Snapdragon Snapdragon 8cx Gen 3 Compute Platform","Snapdragon Snapdragon X2 Elite","Snapdragon WCD9340","Snapdragon WCD9341","Snapdragon WCD9370","Snapdragon WCD9375","Snapdragon WCD9378C","Snapdragon WCD9380","Snapdragon WCD9385","Snapdragon WSA8810","Snapdragon WSA8815","Snapdragon WSA8830","Snapdragon WSA8835","Snapdragon WSA8840","Snapdragon WSA8845","Snapdragon WSA8845H"],"published":"2026-09-17","updated":"2026-09-18","sourceUpdated":"2026-09-18T19:06:08.407","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-24075","references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.html","label":"product-security@qualcomm.com"}],"tags":["nvd","cve.org"],"epss":0.0011,"epssPercentile":0.0146,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-17T14:34:14.054510Z"},"ingestedAt":"2026-09-17T05:11:38.057Z","slug":"CVE-2026-24075","body":"## Overview\n\nMemory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}