Qualcomm GPS Buffer Over-read Vulnerability Allowing Memory Corruption

A memory corruption vulnerability has been identified in various chipsets of Qualcomm GPS technology. This issue arises when the system decodes corrupted satellite data files that contain invalid signature offsets, leading to improper memory handling. The vulnerability is categorized as a buffer over-read, where the system reads more data than intended, potentially allowing for exploitation.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to arbitrary code execution or other unintended behavior by manipulating the application's memory.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and is actively sharing patches. For information on the patching status, contact the device manufacturer.