Volerion logoVolerion
Volerion logoVolerion

Qualcomm Products Buffer Over-read Vulnerability in Data Network Stack & Connectivity

Vulnerability

A buffer over-read vulnerability has been identified in various chipsets used in Qualcomm products, including mobile platforms, automotive software, and connectivity solutions. This vulnerability allows for information disclosure when the user equipment (UE) receives Real-time Transport Protocol (RTP) packets from the network. The issue arises during the decoding and reassembly of RTP packet fragments, particularly when the payload length specified in the packet exceeds the available buffer length. As a result, the vulnerability can be exploited to read beyond the intended memory boundaries, potentially leading to unauthorized information disclosure.

Impact

Exploitation of this vulnerability causes a buffer over-read, leading to a global buffer overflow. This memory corruption occurs when an invalid payload type is used in a test command, causing a buffer over-read that can be exploited to read data from memory that should not be accessible.

Added: Sep 25, 2025, 12:06 AM
Updated: Sep 25, 2025, 12:06 AM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
2.5
exploitability
5.4
remediation
0.0
relevance
0.5
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.