Qualcomm Products Buffer Over-Read Vulnerability in Automotive Android OS

Vulnerability

A buffer over-read vulnerability has been identified in Qualcomm's Automotive Android OS platform. This vulnerability allows for information disclosure when a fastrpc session is opened without proper domain sanitization. The issue affects several chipsets, including those used in various Snapdragon 5G mobile platforms and automotive applications.

Impact

Exploitation of this vulnerability leads to unauthorized information disclosure.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm August 2025 Security Bulletin.

Added: Aug 6, 2025, 11:12 AM
Updated: Aug 6, 2025, 11:12 AM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
2.5
exploitability
3.5
remediation
7.7
relevance
0.3
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.