Qualcomm Products Information Disclosure Vulnerability in HLOS

A vulnerability has been identified in various chipsets used in Qualcomm products, allowing for information disclosure by exposing internal Trusted Application (TA) communication APIs to the High-Level Operating System (HLOS). This vulnerability could lead to unauthorized access to sensitive system information.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure, potentially allowing access to sensitive system data or internal communications.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and recommended that they deploy patches. Instructions for applying the patch can be found in the Qualcomm December 2025 Security Bulletin.