Volerion logoVolerion
Volerion logoVolerion

Qualcomm Automotive Products Information Disclosure Vulnerability via Mailbox Write API

Vulnerability

A vulnerability allowing information disclosure has been identified in Qualcomm automotive chipsets. This issue arises when the mailbox write API is invoked with messages larger than the mailbox size, leading to unintended information exposure.

Impact

Exploitation of this vulnerability can result in unauthorized information disclosure.

Remediation

Qualcomm has notified customers about this vulnerability and is actively sharing patches with device manufacturers. Instructions for applying the patch can be found in the January 2025 Qualcomm Security Bulletin.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
2.5
exploitability
3.5
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.