Volerion logoVolerion
Volerion logoVolerion

Qualcomm Products Buffer Over-Read Vulnerability in Bluetooth Controller Allowing Transient Denial-of-Service

Vulnerability

A buffer over-read vulnerability has been identified in the Bluetooth controller of various chipsets, including those used in Qualcomm's 5G mobile platforms, automotive software, and video collaboration products. This vulnerability leads to memory corruption and a transient denial-of-service condition by causing a global buffer overflow when an invalid payload type is received via a test command. The issue arises while parsing the EPTM test control message, disrupting normal operations.

Impact

Exploitation of this vulnerability causes memory corruption, creating a global buffer overflow that can be exploited to overwrite memory locations and potentially execute arbitrary code. However, in this specific case, the exploitation leads to a transient denial-of-service condition.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and provided patch instructions. For the latest information on the patching status, contact the device manufacturer.

Added: Sep 24, 2025, 4:47 PM
Updated: Sep 24, 2025, 7:38 PM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
0.6
exploitability
7.0
remediation
0.0
relevance
0.6
threat
0.0
urgency
2.9
incentive
5.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.