Qualcomm Core Services Buffer Copy Without Size Check Vulnerability Allowing Memory Corruption

A vulnerability exists in Qualcomm's core services that involves memory corruption due to improper handling of packets from Unix clients. This issue arises from a buffer copy operation that does not adequately verify the size of the incoming data, creating a classic buffer overflow scenario. The vulnerability affects several chipsets and has been reported internally.

Impact

Exploitation of this vulnerability leads to memory corruption, which can commonly result in arbitrary code execution or causing a device to crash.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm December 2025 Security Bulletin.