Qualcomm JPEG Driver Buffer Over-read Vulnerability Allowing Memory Corruption

A buffer over-read vulnerability has been identified in the JPEG driver of Qualcomm chipsets. This vulnerability leads to memory corruption while preprocessing IOCTL requests. It affects several chipsets across different Qualcomm platforms, including Snapdragon mobile platforms and various other chipsets used in automotive, camera, and WLAN applications.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to arbitrary code execution or other undefined behavior.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and is actively sharing patches. For information on the patching status of released devices, contact the device manufacturer.