Qualcomm Products Out-of-Bounds Write Vulnerability in Audio Component

A memory corruption vulnerability has been identified in various chipsets by Qualcomm, including those used in mobile platforms, automotive applications, and audio processing. This vulnerability arises from an out-of-bounds write during the management of MFC channel configurations while music is being played back. The issue has been reported and acknowledged by Qualcomm, and it affects several different chipsets, including those in the Snapdragon series and other Qualcomm platforms.

Impact

Exploitation of this vulnerability leads to memory corruption, which can potentially be manipulated to execute arbitrary code or cause a denial-of-service condition by crashing the application or system.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm December 2025 Security Bulletin.