Qualcomm HLOS Cryptographic Vulnerability Triggering Outdated Trusted Zone Code

A cryptographic vulnerability has been identified in Qualcomm's High-Level Operating System (HLOS) chipsets. This issue arises when HLOS provides incorrect input, activating a Trusted Zone that contains outdated code. The vulnerability could potentially be exploited, leading to significant security implications.

Impact

Exploitation of this vulnerability creates a cryptographic issue that could be leveraged to manipulate or interfere with secure operations, particularly those managed by the Trusted Zone.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and is actively sharing patches. For information on the patching status of released devices, contact the device manufacturer.