Qualcomm Products Out-of-bounds Read Vulnerability Allowing Information Disclosure

A vulnerability allowing information disclosure has been identified in various chipsets of Qualcomm products. This issue arises from an out-of-bounds read while processing data from an image, using specified offset and size parameters. The vulnerability is present in the Core technology area and can be exploited locally.

Impact

Exploitation of this vulnerability leads to unauthorized information disclosure.

Remediation

Qualcomm has notified customers about this vulnerability and provided patching instructions. The patch can be applied by following the instructions available in the Qualcomm August 2025 Security Bulletin.