Qualcomm Products Buffer Copy Without Checking Size of Input Vulnerability in Computer Vision

A memory corruption vulnerability has been identified in various chipsets of Qualcomm products, including those in the Snapdragon 8 and 7 series, as well as in several platforms such as Windows WLAN Host and core services. This vulnerability arises from improper validation of packet data, particularly when processing exceedingly large packets, which can lead to classic buffer overflow scenarios. The issue can be exploited locally, causing memory corruption that could potentially be leveraged for arbitrary code execution.

Impact

Exploitation of this vulnerability leads to memory corruption, creating a classic buffer overflow scenario. Such memory corruption can often be exploited to execute arbitrary code, particularly in environments where the affected application has elevated privileges.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm July 2025 Security Bulletin.