Qualcomm Automotive Software Platform Memory Corruption Vulnerability Allowing Subsystem Crashes

A memory corruption vulnerability has been identified in the Qualcomm Automotive Software platform based on QNX. This issue arises from improper validation of array indices, allowing out-of-range identifiers to trigger subsystem crashes. The vulnerability affects several chipsets within the automotive platform.

Impact

Exploitation of this vulnerability leads to memory corruption, causing crashes in the affected subsystem.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and recommended that they deploy patches on released devices as soon as possible. For information on the patching status of specific devices, contact the device manufacturer.