Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2026-24081

Buffer Over-read in BT Controller

Description

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • AR8035affected
  • C110100affected
  • Cologneaffected
  • CQ7790affected
  • CQ7790Maffected
  • CQ8725Saffected
  • CQ8750Maffected
  • CQ8845Saffected
  • FastConnect 6200affected
  • FastConnect 6700affected
  • FastConnect 6900affected
  • FastConnect 7800affected
  • FWA Gen 3 Ultra Platformaffected
  • FWA Gen 5 Elite Platformaffected
  • G2 Gen 1affected
  • G3x Gen 2affected
  • IQ8 Series Platformaffected
  • IQ9 Series Platformaffected
  • IQX5121affected
  • IQX7181affected
  • Kobukaffected
  • MBM715affected
  • Milosaffected
  • Milos_IOTaffected
  • Monaco_IOTaffected
  • Netraniaffected
  • Orneaffected
  • Palawan25affected
  • Pandeiroaffected
  • Q-7790affected
  • QCA0000affected
  • QCA6391affected
  • QCA6698AQaffected
  • QCA8081affected
  • QCA8337affected
  • QCA8386affected
  • QCC2070affected
  • QCC2073affected
  • QCC2076affected
  • QCC5161affected
  • QCC6705affected
  • QCC710affected
  • QCC711affected
  • QCC7225affected
  • QCF8001affected
  • QCN6224affected
  • QCN6274affected
  • QCN9011affected
  • QCN9012affected
  • QCS6690affected
  • QCS8550affected
  • QFW7114affected
  • QFW7124affected
  • QLN1083BDaffected
  • QLN1086BDaffected
  • QMP1000affected
  • QMP2001affected
  • QPA1083BDaffected
  • QPA1086BDaffected
  • Qualcomm FastConnect 8800 Mobile Connectivity Systemaffected
  • QXM1083affected
  • QXM1086affected
  • QXM1093affected
  • QXM1094affected
  • QXM1095affected
  • QXM1096affected
  • S3 Gen 2 Sound Platformaffected
  • S3 Sound Platformaffected
  • S5 Gen 2 Sound Platformaffected
  • S5 Sound Platformaffected
  • SAR1165Paffected
  • SAR2130Paffected
  • SC8380XPaffected
  • SDX81affected
  • SM6450Paffected
  • SM6475Paffected
  • SM6475Qaffected
  • SM6650Paffected
  • SM6850affected
  • SM7435affected
  • SM7435Paffected
  • SM7525affected
  • SM7550affected
  • SM7550Paffected
  • SM7635Paffected
  • SM7675affected
  • SM7675Paffected
  • SM7750Paffected
  • SM8550Paffected
  • SM8635affected
  • SM8635Paffected
  • SM8650Qaffected
  • SM8735Paffected
  • SM8750Paffected
  • SM8845Paffected
  • SM8950affected
  • SM8950Paffected
  • Snapdragon 6 Gen 1 Mobile Platformaffected
  • Snapdragon 6 Gen 3 Mobile Platformaffected
  • Snapdragon 6 Gen 4 Mobile Platformaffected
  • Snapdragon 7 Gen 4 Mobile Platformaffected
  • Snapdragon 7s Gen 3 Mobile Platformaffected
  • Snapdragon 8 Eliteaffected
  • Snapdragon 8 Elite Gen 5affected
  • Snapdragon 8 Gen 2 Mobile Platformaffected
  • Snapdragon 8 Gen 3 Mobile Platformaffected
  • Snapdragon 8 Gen 5affected
  • Snapdragon 8+ Gen 2 Mobile Platformaffected
  • Snapdragon AR1 Gen 1 Platformaffected
  • Snapdragon AR1+ Gen 1 Platformaffected
  • Snapdragon S7 Sound Gen 1 Platformsaffected
  • Snapdragon X2 Eliteaffected
  • Snapdragon X72 5G Modem-RF Systemaffected
  • Snapdragon X75 5G Modem-RF Systemaffected
  • Snapdragon Reality Elite Platformaffected
  • SW-onlyaffected
  • SXR2230Paffected
  • SXR2250Paffected
  • WCD9340affected
  • WCD9370affected
  • WCD9371affected
  • WCD9375affected
  • WCD9378affected
  • WCD9378Caffected
  • WCD9380affected
  • WCD9385affected
  • WCD9390affected
  • WCD9395affected
  • WCN3988affected
  • WCN6450affected
  • WCN6650affected
  • WCN6755affected
  • WCN7760affected
  • WCN7860affected
  • WCN7861affected
  • WCN7880affected
  • WCN7881affected
  • WCN8841affected
  • WSA8810affected
  • WSA8815affected
  • WSA8830affected
  • WSA8832affected
  • WSA8835affected
  • WSA8840affected
  • WSA8845affected
  • WSA8845Haffected
  • WSA8850affected
  • WSA8850Waffected
  • WSA8855Caffected
  • X1E80100affected
  • XRV7209affected
  • XRV9209affected

References