CVE-2026-24080: Qualcomm Cologne Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory Corruption when handling malformed request parameters in the fingerprint TA.

Affected products

• Qualcomm Cologne Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm QAM8255P Firmware: affected versions not specified
• Qualcomm QAM8295P Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6678AQ Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm SA6145P Firmware: affected versions not specified
• Qualcomm SA6150P Firmware: affected versions not specified
• Qualcomm SA6155P Firmware: affected versions not specified
• Qualcomm SA8145P Firmware: affected versions not specified
• Qualcomm SA8150P Firmware: affected versions not specified
• Qualcomm SA8155P Firmware: affected versions not specified
• Qualcomm SA8195P Firmware: affected versions not specified
• Qualcomm SA8255P Firmware: affected versions not specified
• Qualcomm SA8295P Firmware: affected versions not specified
• Qualcomm SA8540P Firmware: affected versions not specified
• Qualcomm SA9000P Firmware: affected versions not specified
• Qualcomm SW6100 Firmware: affected versions not specified
• Qualcomm SW6100P Firmware: affected versions not specified
• Qualcomm Themisto Firmware: affected versions not specified
• Qualcomm WCD9378C Firmware: affected versions not specified
• and 11 more

Published 2026-08-04. Last modified 2026-08-06.