Buffer Overflow Vulnerability in Linux Kernel Affecting Qcomm MDT Loader

CVE-2025-39787

What is CVE-2025-39787?

A buffer overflow vulnerability exists in the Linux kernel specifically within the Qualcomm MDT loader. The issue arises when the MDT loader processes the ELF header, potentially allowing for the reading of data beyond the allocated boundary of the firmware buffer. This vulnerability can be exploited if the firmware buffer size is not properly validated, leading to potential unauthorized memory access. It has been addressed by ensuring proper sanitation of the ELF header and validation of header-related sizes such as e_phentsize and e_shentsize to maintain traversal integrity.

References