Qualcomm Products Buffer Over-read Vulnerability in DSP Service via MCDM IOCTL Processing

A memory corruption vulnerability has been identified in various chipsets of Qualcomm products. This issue arises when the system dereferences an invalid userspace address in a user buffer, leading to improper memory access during the processing of MCDM IOCTL commands. The vulnerability allows for memory corruption, which could potentially be exploited to cause unintended behavior in the application or system.

Impact

Exploitation of this vulnerability leads to memory corruption, allowing for potential arbitrary code execution or causing a system crash.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and is actively sharing patches. For information on the patching status of released devices, contact the device manufacturer.