Qualcomm Products Out-of-bounds Write Vulnerability in Computer Vision Component

A memory corruption vulnerability has been identified in the computer vision component of various chipsets, including those used in automotive, audio, and camera applications. This vulnerability arises from improper handling of firmware responses in a shared queue, leading to memory corruption. It affects several chipsets across different technology areas, with a high security rating and a CVSS score of 7.8.

Impact

Exploitation of this vulnerability leads to memory corruption, which can potentially be exploited to execute arbitrary code or cause a denial-of-service condition.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm May 2025 Security Bulletin.