Volerion logoVolerion
Volerion logoVolerion

Qualcomm Automotive Vehicle Networks Memory Corruption Vulnerability

Vulnerability

A memory corruption vulnerability has been identified in Qualcomm's Automotive Vehicle Networks. This issue arises from a time-of-check time-of-use (TOCTOU) race condition, which may lead to improper handling of messages during allocation, potentially allowing for memory corruption.

Impact

Exploitation of this vulnerability can lead to memory corruption, which may be exploited to cause a use-after-free condition, potentially allowing for arbitrary code execution or other malicious actions.

Remediation

Qualcomm has notified customers about this vulnerability and is actively sharing patches. Instructions for applying the patch can be found in the Qualcomm March 2025 Security Bulletin.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
3.1
exploitability
3.5
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.