Qualcomm Video Buffer Over-Read Vulnerability Allowing Information Disclosure

Vulnerability

A buffer over-read vulnerability has been identified in the video processing component of certain Qualcomm chipsets. This vulnerability allows for information disclosure when the video engine receives escape input data that is smaller than the expected minimum size. The issue arises from improper handling of input data, leading to a buffer over-read condition.

Impact

Exploitation of this vulnerability causes a buffer over-read, which can lead to information disclosure by allowing unauthorized access to data that should be protected.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and provided patch instructions. For the latest information on the patching status, contact the device manufacturer.

Added: Sep 24, 2025, 5:07 PM
Updated: Sep 24, 2025, 8:02 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
2.5
exploitability
3.3
remediation
7.7
relevance
0.6
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.