CVE-2026-24091: Qualcomm 5g Fixed Wireless Access Platform Firmware

High severity, CVSS 7.2. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption while processing fastboot commands with improperly formatted input.

Affected products

• Qualcomm 5g Fixed Wireless Access Platform Firmware: affected versions not specified
• Qualcomm APQ8098 Firmware: affected versions not specified
• Qualcomm AR8031 Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm C-v2x 9150 Firmware: affected versions not specified
• Qualcomm Cologne Firmware: affected versions not specified
• Qualcomm CQ7790 Firmware: affected versions not specified
• Qualcomm CQ8725S Firmware: affected versions not specified
• Qualcomm CQ8750M Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm CSRB31024 Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm Flight RB5 5g Platform Firmware: affected versions not specified
• Qualcomm FSM100 Platform Firmware: affected versions not specified
• Qualcomm Fwa Gen 3 Ultra Firmware: affected versions not specified
• Qualcomm Fwa Gen 5 Elite Firmware: affected versions not specified
• Qualcomm g1 Gen 1 Firmware: affected versions not specified
• Qualcomm g2 Gen 1 Firmware: affected versions not specified
• Qualcomm g3x Gen 2 Firmware: affected versions not specified
• Qualcomm Iq-9075 Firmware: affected versions not specified
• and 248 more

Published 2026-06-01. Last modified 2026-07-22.