Qualcomm Products Buffer Copy Without Checking Size of Input Vulnerability Leading to Transient Denial-of-Service

A vulnerability exists in various chipsets used in Qualcomm products, allowing for a transient denial-of-service condition. This issue arises from a buffer copy operation that does not properly check the size of the input, creating a classic buffer overflow scenario. The vulnerability is triggered while processing the country information element, which can lead to memory corruption and disruption of normal device functionality.

Impact

Exploitation of this vulnerability can cause a transient denial-of-service condition, temporarily disrupting the normal operation of the device.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm March 2025 Security Bulletin.