Volerion logoVolerion
Volerion logoVolerion

Qualcomm Automotive Chipsets Memory Corruption Vulnerability Allowing for Potential Code Execution

Vulnerability

A memory corruption vulnerability has been identified in various chipsets used in automotive applications. This issue arises from improper calculations of offsets based on partition start points, leading to memory corruption. The vulnerability is present in multiple chipsets, including QAM8255P, QAM8295P, QAM8620P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6574AU, QCA6595, QCA6595AU, QCA6688AQ, QCA6696, QCA6698AQ, QCA6797AQ, QCA8695AU, SA6145P, SA6150P, SA6155P, SA7255P, SA7775P, SA8145P, SA8150P, SA8155P, SA8195P, SA8255P, SA8295P, SA8540P, SA8620P, SA8650P, SA8770P, SA8775P, SA9000P, SRV1H, SRV1L, SRV1M.

Impact

Exploitation of this vulnerability leads to memory corruption, which can potentially be leveraged for arbitrary code execution.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and recommended that they deploy patches. Instructions for applying the patch can be found in the Qualcomm February 2026 Security Bulletin.

Added: Feb 2, 2026, 4:32 PM
Updated: Feb 2, 2026, 4:32 PM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
5.0
exploitability
3.5
remediation
0.0
relevance
2.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.