Qualcomm Automotive QNX OS Buffer Over-read Vulnerability Leading to Transient Denial-of-Service

A buffer over-read vulnerability has been identified in the Automotive QNX OS used by Qualcomm. This vulnerability can lead to a transient denial-of-service condition when the GVM sends a specific message type to the Vdev-FastRPC backend.

Impact

Exploitation of this vulnerability can cause a temporary denial-of-service condition, disrupting normal operations by causing a process or service to become unresponsive or unavailable for a period of time.

Remediation

Qualcomm has notified customers about this vulnerability and is actively sharing patches. Instructions for applying the patch can be found in the January 2025 Qualcomm Security Bulletin.