Qualcomm Bluetooth Host Improper Validation of Array Index Vulnerability Allowing Memory Corruption

Vulnerability

A vulnerability has been identified in the Bluetooth Host component of Qualcomm chipsets, involving improper validation of array indices when processing IOCTL commands. This flaw can lead to memory corruption, particularly when larger buffers are used. The issue is present in various chipsets, including those used in mobile platforms, automotive applications, and more.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to undefined behavior such as arbitrary code execution or causing a device to crash.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be obtained from the device manufacturer.

Added: Aug 6, 2025, 8:35 AM
Updated: Aug 6, 2025, 8:35 AM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
2.5
exploitability
3.5
remediation
7.7
relevance
0.3
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.