Qualcomm Products Buffer Over-read Vulnerability in Core Services Allowing Information Disclosure

A buffer over-read vulnerability has been identified in various chipsets of Qualcomm products, including those in the Snapdragon series, automotive platforms, and core service components. This vulnerability allows for information disclosure by improperly processing commands from clients via the diagnostic interface.

Impact

Exploitation of this vulnerability leads to unauthorized information disclosure.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and recommended that they deploy patches on released devices as soon as possible. For information on the patching status, contact the device manufacturer.