Qualcomm Snapdragon Chipsets Memory Corruption Vulnerability During Voice Activation

A memory corruption vulnerability has been identified in various chipsets of Qualcomm Snapdragon processors. This issue occurs during voice activation when sound model parameters are transferred from the High-Level Operating System (HLOS) to the Audio Digital Signal Processor (ADSP). The vulnerability is present in several chipsets across different Snapdragon platforms, including mobile, automotive, and connectivity chipsets.

Impact

Exploitation of this vulnerability can lead to memory corruption, causing potential use-after-free conditions, which may be exploited to execute arbitrary code or create a denial-of-service condition.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm March 2025 Security Bulletin.