Qualcomm Buffer Over-Read Vulnerability in Computer Vision Component

A buffer over-read vulnerability has been identified in the computer vision component of certain Qualcomm chipsets. This issue arises from a cryptographic flaw that allows data to be copied to a destination buffer without proper size validation, potentially leading to memory corruption.

Impact

Exploitation of this vulnerability causes memory corruption, which can disrupt normal application behavior and potentially be leveraged for arbitrary code execution.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and is actively sharing patches. For information on the patching status of released devices, contact the device manufacturer.