CVE-2026-24075

HighCVSS 7.0/10Last modified Sep 22, 2026

Description

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-126

Affected software

No affected versions have been published.

Timeline

Published: Sep 17, 2026
Last modified: Sep 22, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-240766.7Memory Corruption when processing registry values with incorrect types using a direct query method.CVE-2026-240776.5Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.CVE-2026-240786.5Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.CVE-2026-240798.1Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.CVE-2026-24084.7Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension.CVE-2026-240807.8Memory Corruption when handling malformed request parameters in the fingerprint TA.CVE-2026-240817.4Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.CVE-2026-240827.8Memory Corruption when copying data from a freed source while executing performance counter deselect operation.CVE-2026-240837.8Memory Corruption while processing IOCTL device driver requests with invalid arguments.CVE-2026-240847.5Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.CVE-2026-240857.2Memory Corruption when processing display command line information due to improper initialization of a variable.CVE-2026-240877.2Memory corruption while processing fastboot OEM commands.