Qualcomm Automotive OS Platform Improper Input Validation Vulnerability Allowing Memory Corruption

A vulnerability exists in the clock device of the Automotive Software platform based on QNX, where improper input validation may lead to memory corruption. This issue affects several chipsets, including QAM8255P, QAM8295P, QAM8620P, QAM8650P, QAM8775P, SA8255P, SA8295P, SA8540P, SA8620P, SA8650P, SA8770P, SA8775P, and SA9000P.

Impact

Exploitation of this vulnerability can cause memory corruption, potentially leading to arbitrary code execution or causing a denial-of-service condition by crashing the system or application.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm March 2025 Security Bulletin.