Qualcomm Snapdragon Chipsets Memory Corruption Vulnerability in NPU Driver APIs

A use-after-free vulnerability has been identified in various chipsets of Qualcomm Snapdragon processors. This vulnerability arises from memory corruption issues when the Neural Processing Unit (NPU) driver APIs are called concurrently. The flaw could potentially be exploited, leading to memory corruption and causing instability or unexpected behavior in the system.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to undefined behavior in the application or system, such as crashes or arbitrary code execution.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm March 2025 Security Bulletin.