Qualcomm WinBlast Driver Out-of-Bounds Write Vulnerability Allowing Memory Corruption

A memory corruption vulnerability has been identified in the WinBlast driver of Qualcomm chipsets. This issue arises from an out-of-bounds write while accessing a buffer during IOCTL processing, which could potentially be exploited to cause memory corruption.

Impact

Exploitation of this vulnerability leads to memory corruption, which can commonly be exploited to execute arbitrary code or cause a denial-of-service condition by crashing the system or application.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and recommended that they deploy patches on released devices as soon as possible. For information on the patching status of released devices, contact the device manufacturer.