Volerion logoVolerion
Volerion logoVolerion

Qualcomm Automotive Software Platform Memory Corruption Vulnerability Allowing Denial-of-Service

Vulnerability

A memory corruption vulnerability has been identified in the Qualcomm Automotive Software platform based on QNX. This issue arises while processing messages when the buffer is controlled by a Guest VM, allowing for continuous modification of the buffer's value. The vulnerability could lead to a transient denial-of-service condition by causing memory corruption during the handling of specific messages, potentially disrupting normal operations.

Impact

Exploitation of this vulnerability can cause memory corruption, leading to a transient denial-of-service condition by disrupting normal operations on the affected system.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm May 2025 Security Bulletin.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
0.6
exploitability
3.1
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.