Qualcomm Various Chipsets Use-After-Free Vulnerability in Computer Vision via IOCTL Calls

A use-after-free vulnerability has been identified in Qualcomm chipsets, allowing memory corruption by invoking IOCTL calls from user-space to kernel-space. This vulnerability arises while handling session errors, potentially leading to unauthorized memory access or manipulation.

Impact

Exploitation of this vulnerability causes memory corruption, which can be leveraged to manipulate program execution or access unauthorized memory regions.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm February 2025 Security Bulletin.