Qualcomm Automotive OS Platform Memory Corruption Vulnerability via Guest VM Interaction

A memory corruption vulnerability has been identified in the Qualcomm Automotive Software platform based on QNX. This issue arises during communication between the primary and guest virtual machines, potentially leading to memory corruption.

Impact

Exploitation of this vulnerability can cause memory corruption, which may disrupt normal operations and lead to undefined behavior in the application or system.

Remediation

Qualcomm has notified customers about this vulnerability and is actively sharing patches. Instructions for applying the patch can be found in the Qualcomm March 2025 Security Bulletin.