CVE-2026-24087: Improper Validation of Syntactic Correctness of Input in Kernel

Synopsis

Memory corruption vulnerability in the Qualcomm Snapdragon kernel occurs while processing fastboot OEM commands. Exploitation requires physical access to the device along with a high-privilege account, meaning an attacker must be physically present and authenticated at an elevated level. Successful exploitation gives the attacker full read, write, and crash-level control over the affected system. HarborGuard tracks this advisory for patch availability and will make a patched-image rebuild available as soon as Qualcomm publishes a fix.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker requires physical proximity to the target device; no network path is needed to reach the vulnerable component.

• AuthenticationRequired

  A high-privilege or administrative account is required before the fastboot OEM command interface can be reached.

• Victim interactionNot required

  No user interaction is required; the attacker can trigger the memory corruption without any action from a legitimate user.

• Attack complexityDetail

  Exploit conditions are straightforward and reliable once physical access and credentials are in hand; no race conditions or special environmental setup are required.

Blast Radius

• A successful attacker reads arbitrary kernel memory, including secrets, cryptographic material, and stored credentials.
• A successful attacker writes arbitrary kernel memory, allowing persistent code execution or firmware modification.
• A successful attacker crashes the affected kernel, rendering the device unavailable.
• Because the scope is changed (S:C), impact can extend beyond the kernel itself to other components or security boundaries on the same device.