Qualcomm Windows WLAN Host Buffer Over-read Vulnerability via FIPS Encryption IOCTL

A memory corruption vulnerability has been identified in the Windows WLAN Host component of certain Qualcomm chipsets. This issue arises from a buffer over-read while processing FIPS encryption or decryption IOCTL calls initiated from user-space. The vulnerability could potentially be exploited to cause memory corruption, leading to undefined behavior in the application.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to arbitrary code execution or application crashes.

Remediation

Qualcomm has notified customers about this vulnerability and provided patch instructions. The patch can be applied by following the instructions available in the January 2025 Qualcomm Security Bulletin.