Qualcomm Windows Compute Out-of-Bounds Write Vulnerability Allowing Memory Corruption

A memory corruption vulnerability has been identified in the Windows Compute technology area of various chipsets, including several Snapdragon mobile platforms, automotive platforms, and other Qualcomm chipsets. This vulnerability arises from an out-of-bounds write during the processing of encryption and decryption commands, which could potentially be exploited to cause memory corruption.

Impact

Exploitation of this vulnerability leads to memory corruption, which can commonly result in arbitrary code execution or causing a system crash.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and recommended that they deploy patches on released devices as soon as possible. For information on the patching status of released devices, contact the device manufacturer.