Volerion logoVolerion
Volerion logoVolerion

Qualcomm SMSS Information Disclosure Vulnerability via QFPROM Fuse Operations

Vulnerability

A vulnerability has been identified in the Qualcomm SMSS (Secure Memory Storage Service) that allows for information disclosure. This issue arises when a user-level driver conducts read or write operations on Fuse regions using QFPROM, potentially exposing sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure by allowing user-level drivers to read from or write to Fuse regions, which may contain sensitive data.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and is actively sharing patches. For information on the patching status of released devices, contact the device manufacturer.

Added: Nov 4, 2025, 4:44 AM
Updated: Nov 4, 2025, 4:44 AM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
2.5
exploitability
3.5
remediation
0.0
relevance
0.9
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.