CVE-2026-24081 PUBLISHED

Buffer Over-read in BT Controller

Assigner: qualcomm
Reserved: 21.01.2026 Published: 17.09.2026 Updated: 17.09.2026

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS Score: 7.4

Attack Vector	Adjacent Network	Scope	Changed
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	None
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Qualcomm, Inc.
Product	Snapdragon
Versions	Default: unaffected Version AR8035 is affected Version C110100 is affected Version Cologne is affected Version CQ7790 is affected Version CQ7790M is affected Version CQ8725S is affected Version CQ8750M is affected Version CQ8845S is affected Version FastConnect 6200 is affected Version FastConnect 6700 is affected Version FastConnect 6900 is affected Version FastConnect 7800 is affected Version FWA Gen 3 Ultra Platform is affected Version FWA Gen 5 Elite Platform is affected Version G2 Gen 1 is affected Version G3x Gen 2 is affected Version IQ8 Series Platform is affected Version IQ9 Series Platform is affected Version IQX5121 is affected Version IQX7181 is affected Version Kobuk is affected Version MBM715 is affected Version Milos is affected Version Milos_IOT is affected Version Monaco_IOT is affected Version Netrani is affected Version Orne is affected Version Palawan25 is affected Version Pandeiro is affected Version Q-7790 is affected Version QCA0000 is affected Version QCA6391 is affected Version QCA6698AQ is affected Version QCA8081 is affected Version QCA8337 is affected Version QCA8386 is affected Version QCC2070 is affected Version QCC2073 is affected Version QCC2076 is affected Version QCC5161 is affected Version QCC6705 is affected Version QCC710 is affected Version QCC711 is affected Version QCC7225 is affected Version QCF8001 is affected Version QCN6224 is affected Version QCN6274 is affected Version QCN9011 is affected Version QCN9012 is affected Version QCS6690 is affected Version QCS8550 is affected Version QFW7114 is affected Version QFW7124 is affected Version QLN1083BD is affected Version QLN1086BD is affected Version QMP1000 is affected Version QMP2001 is affected Version QPA1083BD is affected Version QPA1086BD is affected Version Qualcomm FastConnect 8800 Mobile Connectivity System is affected Version QXM1083 is affected Version QXM1086 is affected Version QXM1093 is affected Version QXM1094 is affected Version QXM1095 is affected Version QXM1096 is affected Version S3 Gen 2 Sound Platform is affected Version S3 Sound Platform is affected Version S5 Gen 2 Sound Platform is affected Version S5 Sound Platform is affected Version SAR1165P is affected Version SAR2130P is affected Version SC8380XP is affected Version SDX81 is affected Version SM6450P is affected Version SM6475P is affected Version SM6475Q is affected Version SM6650P is affected Version SM6850 is affected Version SM7435 is affected Version SM7435P is affected Version SM7525 is affected Version SM7550 is affected Version SM7550P is affected Version SM7635P is affected Version SM7675 is affected Version SM7675P is affected Version SM7750P is affected Version SM8550P is affected Version SM8635 is affected Version SM8635P is affected Version SM8650Q is affected Version SM8735P is affected Version SM8750P is affected Version SM8845P is affected Version SM8950 is affected Version SM8950P is affected Version Snapdragon 6 Gen 1 Mobile Platform is affected Version Snapdragon 6 Gen 3 Mobile Platform is affected Version Snapdragon 6 Gen 4 Mobile Platform is affected Version Snapdragon 7 Gen 4 Mobile Platform is affected Version Snapdragon 7s Gen 3 Mobile Platform is affected Version Snapdragon 8 Elite is affected Version Snapdragon 8 Elite Gen 5 is affected Version Snapdragon 8 Gen 2 Mobile Platform is affected Version Snapdragon 8 Gen 3 Mobile Platform is affected Version Snapdragon 8 Gen 5 is affected Version Snapdragon 8+ Gen 2 Mobile Platform is affected Version Snapdragon AR1 Gen 1 Platform is affected Version Snapdragon AR1+ Gen 1 Platform is affected Version Snapdragon S7 Sound Gen 1 Platforms is affected Version Snapdragon X2 Elite is affected Version Snapdragon X72 5G Modem-RF System is affected Version Snapdragon X75 5G Modem-RF System is affected Version Snapdragon Reality Elite Platform is affected Version SW-only is affected Version SXR2230P is affected Version SXR2250P is affected Version WCD9340 is affected Version WCD9370 is affected Version WCD9371 is affected Version WCD9375 is affected Version WCD9378 is affected Version WCD9378C is affected Version WCD9380 is affected Version WCD9385 is affected Version WCD9390 is affected Version WCD9395 is affected Version WCN3988 is affected Version WCN6450 is affected Version WCN6650 is affected Version WCN6755 is affected Version WCN7760 is affected Version WCN7860 is affected Version WCN7861 is affected Version WCN7880 is affected Version WCN7881 is affected Version WCN8841 is affected Version WSA8810 is affected Version WSA8815 is affected Version WSA8830 is affected Version WSA8832 is affected Version WSA8835 is affected Version WSA8840 is affected Version WSA8845 is affected Version WSA8845H is affected Version WSA8850 is affected Version WSA8850W is affected Version WSA8855C is affected Version X1E80100 is affected Version XRV7209 is affected Version XRV9209 is affected

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.html

Problem Types

CWE-126 Buffer Over-read CWE