Qualcomm Products Memory Corruption Vulnerability via IOCTL Calls to Set Mixer Controls

A memory corruption vulnerability has been identified in various chipsets of Qualcomm products, including those in the Snapdragon series, automotive platforms, and more. This vulnerability arises from improper input validation while processing an IOCTL request to adjust mixer controls, allowing for potential memory corruption.

Impact

Exploitation of this vulnerability leads to memory corruption, which can commonly result in arbitrary code execution or causing a device to crash.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm May 2025 Security Bulletin.