CVE-2026-25273

Undergoing Analysis Undergoing Analysis - In Progress

Memory Corruption in Qualcomm Camera Driver

Publication date: 2026-10-06

Last updated on: 2026-10-09

Assigner: Qualcomm, Inc.

Description

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-09

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-25273

EUVD

EUVD-2026-92975

Affected Vendors & Products

Vendor	Product	Version / Range
qualcomm	congo_firmware	*
qualcomm	cq8845s_firmware	*
qualcomm	cq8850ns_firmware	*
qualcomm	fastconnect_6200_firmware	*
qualcomm	fastconnect_6900_firmware	*
qualcomm	fastconnect_7800_firmware	*
qualcomm	orne_firmware	*
qualcomm	pandeiro_firmware	*
qualcomm	qmp1000_firmware	*
qualcomm	qmp2001_firmware	*
qualcomm	fastconnect_8800_mobile_connectivity_system_firmware	*
qualcomm	snapdragon_865_5g_mobile_platform_firmware	*
qualcomm	sm4875_firmware	*
qualcomm	sm6850_firmware	*
qualcomm	sm8845p_firmware	*
qualcomm	sm8950_firmware	*
qualcomm	sm8950p_firmware	*
qualcomm	sm8975_firmware	*
qualcomm	sm8975p_firmware	*
qualcomm	snapdragon_460_mobile_platform_firmware	*
qualcomm	snapdragon_662_mobile_platform_firmware	*
qualcomm	snapdragon_8_elite_firmware	*
qualcomm	snapdragon_8_elite_gen_5_firmware	*
qualcomm	snapdragon_8_gen_5_firmware	*
qualcomm	snapdragon_xr2_5g_platform_firmware	*
qualcomm	snapdragon_xr2+_gen_1_platform_firmware	*
qualcomm	wcd9370_firmware	*
qualcomm	wcd9375_firmware	*
qualcomm	wcd9378_firmware	*
qualcomm	wcd9380_firmware	*
qualcomm	wcd9395_firmware	*
qualcomm	wcn3950_firmware	*
qualcomm	wcn3988_firmware	*
qualcomm	wcn6450_firmware	*
qualcomm	wcn7760_firmware	*
qualcomm	wcn7860_firmware	*
qualcomm	wcn7861_firmware	*
qualcomm	wcn7880_firmware	*
qualcomm	wcn7881_firmware	*
qualcomm	wcn8841_firmware	*
qualcomm	wsa8810_firmware	*
qualcomm	wsa8815_firmware	*
qualcomm	wsa8830_firmware	*
qualcomm	wsa8832_firmware	*
qualcomm	wsa8835_firmware	*
qualcomm	wsa8840_firmware	*
qualcomm	wsa8845_firmware	*
qualcomm	wsa8845h_firmware	*
qualcomm	wsa8850_firmware	*
qualcomm	wsa8850w_firmware	*
qualcomm	wsa8855c_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory corruption issue caused by an out-of-bounds write during camera driver updates. It occurs when processing camera operations, potentially allowing unauthorized memory access or code execution.

Detection Guidance

This vulnerability involves memory corruption during camera operations due to out-of-bounds write in Qualcomm Snapdragon drivers. Detection requires checking driver versions and monitoring for memory corruption events. Use commands like 'adb shell dmesg | grep -i camera' to check kernel logs for camera-related errors. Inspect driver modules with 'lsmod | grep -i camera' and verify installed driver versions against Qualcomm's security advisories.

Impact Analysis

This vulnerability could allow attackers to execute arbitrary code, escalate privileges, or cause system crashes on affected devices. It primarily impacts devices using Qualcomm Snapdragon processors with vulnerable camera drivers.

Compliance Impact

The vulnerability involves memory corruption due to out-of-bounds write during driver updates, which could lead to unauthorized code execution or data access. This may impact compliance with GDPR by risking personal data exposure or integrity breaches, and with HIPAA by potentially compromising protected health information if exploited.

Mitigation Strategies

Update the Qualcomm Snapdragon driver to the latest version provided by Qualcomm to address the out-of-bounds write issue during camera operations.

Hi! I’m here to help you understand CVE-2026-25273. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70