Primary

Context

Qualcomm Boot Loader Memory Corruption Vulnerability Allowing Firmware Manipulation

Vulnerability

A memory corruption vulnerability has been identified in the boot loader of various chipsets, including those used in Snapdragon mobile platforms and automotive applications. This vulnerability arises from incorrect authorization when loading invalid firmware, leading to potential exploitation during the boot process.

Impact

Exploitation of this vulnerability causes memory corruption, which can be leveraged to manipulate the boot loader's firmware handling, potentially leading to unauthorized firmware execution or modification.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm December 2025 Security Bulletin.

Added: Dec 18, 2025, 7:14 AM

Updated: Dec 18, 2025, 7:14 AM

Affected Products

Qualcomm FastConnect 6200

Moderate fix1 remedy

cpe:2.3:h:qualcomm:fastconnect_6200:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm FastConnect 6700

Moderate fix1 remedy

cpe:2.3:h:qualcomm:fastconnect_6700:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm FastConnect 6900

Moderate fix1 remedy

cpe:2.3:h:qualcomm:fastconnect_6900:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm FastConnect 7800

Moderate fix1 remedy

cpe:2.3:h:qualcomm:fastconnect_7800:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QAM8255P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qam8255p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QAM8295P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qam8295p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QAM8620P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qam8620p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QAM8650P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qam8650p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QAM8775P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qam8775p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QAMSRV1H

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qamsrv1h:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QAMSRV1M

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qamsrv1m:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA6574

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6574:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA6574A

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6574a:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA6574AU

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6574au:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA6595

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6595:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA6595AU

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6595au:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA6688AQ

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6688aq:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA6696

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6696:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA6698AQ

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6698aq:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA6797AQ

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6797aq:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA8695AU

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA9367

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca9367:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA9377

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca9377:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCM6690

0 remedies

Qualcomm QCS610

0 remedies

cpe:2.3:h:qualcomm:qcs610:*:*:*:*:*:*:*

0 remedies

Qualcomm QCS6690

0 remedies

Qualcomm QMP1000

0 remedies

Qualcomm Video Collaboration VC1 Platform

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qualcomm_video_collaboration_vc1_platform:*:*:*:*:*:*:*, +3 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm Video Collaboration VC3 Platform

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qualcomm_video_collaboration_vc3_platform:*:*:*:*:*:*:*, +7 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SA6155P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sa6155:*:*:*:*:*:*:*, +3 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SA7255P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sa7255p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SA7775P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sa7775p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SA8155P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sa8155:*:*:*:*:*:*:*, +3 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SA8195P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sa8195p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SA8295P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sa8295p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SA8620P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sa8620p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SA8650P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sa8650p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SA8770P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sa8770p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SA8775P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sa8775p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SA9000P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sa9000p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SG6150

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sg4150p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SM4635

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sm4635:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SM6650

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sm6650:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SM6650P

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SM7635

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sm7635:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SM7635P

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SM7675

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sm7675:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SM7675P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sm7675p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SM8635

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sm8635:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SM8635P

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sm8635p:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SM8650Q

Moderate fix1 remedy

cpe:2.3:o:qualcomm:sm8650q_firmware:*:*:*:*:*:*:*

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SM8735

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SM8750

Moderate fix1 remedy

cpe:2.3:h:qualcomm:sm8750:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm SM8850

Moderate fix1 remedy

>= 1.0, < 1.1

Vulnerability Rating

Custom Algorithm

spread

8.1

impact

0.6

exploitability

3.5

remediation

7.7

relevance

1.5

threat

0.0

urgency

2.9

incentive

1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.

Vulnerability Rating

Custom Algorithm

spread

8.1

impact

0.6

exploitability

3.5

remediation

7.7

relevance

1.5

threat

0.0

urgency

2.9

incentive

1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.