Volerion logoVolerion
Volerion logoVolerion

Qualcomm Snapdragon Products Use-After-Free Vulnerability in Neural Processing Unit

Vulnerability

A use-after-free vulnerability has been identified in various chipsets of Qualcomm Snapdragon products. This vulnerability leads to memory corruption when the IOCTL interface is used to simultaneously map and unmap buffers. The issue arises from improper handling of buffer management, allowing for potential exploitation through crafted IOCTL commands.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to arbitrary code execution or the introduction of a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending IOCTL commands that map and unmap buffers at the same time. This can be done through a custom application or script that interacts with the affected device's NPU via the IOCTL interface, specifically targeting chipsets that are known to be vulnerable.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm August 2025 Security Bulletin.

Added: Aug 6, 2025, 11:06 AM
Updated: Aug 6, 2025, 11:06 AM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
2.5
exploitability
3.4
remediation
7.7
relevance
0.3
threat
1.6
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.