Qualcomm Automotive Products Memory Corruption Vulnerability Allowing Performance Counter Manipulation

A use-after-free vulnerability has been identified in various chipsets used in Qualcomm automotive products. This vulnerability leads to memory corruption by copying data from a freed source while performing a performance counter deselect operation. The issue has been reported internally and is classified as high severity, with a CVSS score of 7.8.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to arbitrary code execution or the introduction of other vulnerabilities, such as a denial-of-service condition.

Remediation

Qualcomm has released a patch for this vulnerability, which is available through the Qualcomm Update Catalog. Instructions for applying the patch can be obtained by contacting the device manufacturer.