Volerion logoVolerion
Volerion logoVolerion

Qualcomm Products Memory Corruption Vulnerability in Hypervisor Allowing Buffer Over-Read and Information Disclosure

Vulnerability

A memory corruption vulnerability has been identified in the hypervisor of various chipsets used in Qualcomm products. This issue arises when a PIL authenticated virtual machine (VM) image is loaded without maintaining proper cache coherency, leading to memory corruption. The vulnerability allows for a buffer over-read, causing information disclosure. It affects several different chipsets and platforms, including Snapdragon 8 Gen 1 and 8 Gen 2 mobile platforms, automotive software platforms based on QNX, and various other chipsets used in Qualcomm's video collaboration platforms, among others.

Impact

Exploitation of this vulnerability leads to memory corruption, which can cause arbitrary code execution or create a denial-of-service condition by crashing the system or application.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and is actively sharing patches. Instructions for applying the patch can be found in the Qualcomm September 2025 Security Bulletin.

Added: Sep 24, 2025, 8:21 PM
Updated: Sep 24, 2025, 8:21 PM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
0.6
exploitability
3.5
remediation
7.7
relevance
0.5
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.