Qualcomm Snapdragon Chipsets Improper Access Control Vulnerability Allowing Memory Corruption

Vulnerability

A vulnerability exists in various chipsets of Qualcomm Snapdragon processors, including those used in mobile platforms, compute platforms, and certain modem-RF systems. This vulnerability arises from improper access control, which can lead to memory corruption when a virtual machine (VM) is attached while the high-level operating system (HLOS) still has access to it. The issue may be exploited locally, potentially causing significant memory corruption.

Impact

Exploitation of this vulnerability can lead to memory corruption, which may cause instability or unexpected behavior in the system, such as crashes or arbitrary code execution.

Remediation

Qualcomm has developed patches for this vulnerability, which are available through the Qualcomm Update Catalog. Instructions for applying the patch can be obtained from the device manufacturer.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
0.6
exploitability
3.5
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.