Qualcomm Products Memory Corruption Vulnerability in IOCTL Processing Allowing Out-of-bounds Write

A memory corruption vulnerability has been identified in various chipsets of Qualcomm products, including those in the Snapdragon series, automotive platforms, and more. This vulnerability arises while processing IOCTL requests, where the input buffer can significantly exceed the command argument limit, leading to memory corruption.

Impact

Exploitation of this vulnerability causes memory corruption, which can potentially be exploited to execute arbitrary code or cause a denial-of-service condition.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm May 2025 Security Bulletin.