CVE-2026-25269
Received
Received - Intake
Memory Corruption in Qualcomm Camera Driver
Vulnerability report for CVE-2026-25269, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-06
Last updated on: 2026-10-06
Assigner: Qualcomm, Inc.
Description
Description
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Qualcomm, | Inc. | Snapdragon Cologne |
| Qualcomm, | Inc. | Snapdragon CQ7790 |
| Qualcomm, | Inc. | Snapdragon CQ8725S |
| Qualcomm, | Inc. | Snapdragon CQ8750M |
| Qualcomm, | Inc. | Snapdragon FastConnect 6700 |
| Qualcomm, | Inc. | Snapdragon FastConnect 6900 |
| Qualcomm, | Inc. | Snapdragon FastConnect 7800 |
| Qualcomm, | Inc. | Snapdragon IQ10 Series |
| Qualcomm, | Inc. | Snapdragon IQ6 Series Platform |
| Qualcomm, | Inc. | Snapdragon IQ8 Series Platform |
| Qualcomm, | Inc. | Snapdragon IQ9 Series Platform |
| Qualcomm, | Inc. | Snapdragon LeMans_AU_LGIT |
| Qualcomm, | Inc. | Snapdragon LeMansAU |
| Qualcomm, | Inc. | Snapdragon MBM715 |
| Qualcomm, | Inc. | Snapdragon Milos |
| Qualcomm, | Inc. | Snapdragon Monaco_IOT |
| Qualcomm, | Inc. | Snapdragon Orne |
| Qualcomm, | Inc. | Snapdragon Palawan25 |
| Qualcomm, | Inc. | Snapdragon Pandeiro |
| Qualcomm, | Inc. | Snapdragon QAM8255P |
| Qualcomm, | Inc. | Snapdragon QAMSRV1H |
| Qualcomm, | Inc. | Snapdragon QAMSRV1M |
| Qualcomm, | Inc. | Snapdragon QCA6391 |
| Qualcomm, | Inc. | Snapdragon QCA6595 |
| Qualcomm, | Inc. | Snapdragon QCA6595AU |
| Qualcomm, | Inc. | Snapdragon QCA6678AQ |
| Qualcomm, | Inc. | Snapdragon QCA6698AQ |
| Qualcomm, | Inc. | Snapdragon QCA6698AU |
| Qualcomm, | Inc. | Snapdragon QCA6797AQ |
| Qualcomm, | Inc. | Snapdragon QCA8695AU |
| Qualcomm, | Inc. | Snapdragon QCM5430 |
| Qualcomm, | Inc. | Snapdragon QCM6490 |
| Qualcomm, | Inc. | Snapdragon QCM8550 |
| Qualcomm, | Inc. | Snapdragon QCM8838 |
| Qualcomm, | Inc. | Snapdragon QCN9011 |
| Qualcomm, | Inc. | Snapdragon QCN9012 |
| Qualcomm, | Inc. | Snapdragon QCN9274 |
| Qualcomm, | Inc. | Snapdragon QCS8550 |
| Qualcomm, | Inc. | Snapdragon QLN1083BD |
| Qualcomm, | Inc. | Snapdragon QLN1086BD |
| Qualcomm, | Inc. | Snapdragon QMP1000 |
| Qualcomm, | Inc. | Snapdragon QPA1083BD |
| Qualcomm, | Inc. | Snapdragon QPA1086BD |
| Qualcomm, | Inc. | Snapdragon Qualcomm Dragonwing Q-6690 |
| Qualcomm, | Inc. | Snapdragon Qualcomm Dragonwing Q-7790 |
| Qualcomm, | Inc. | Snapdragon Qualcomm Dragonwing Q-8845 |
| Qualcomm, | Inc. | Snapdragon Qualcomm Dragonwing QCM4490 |
| Qualcomm, | Inc. | Snapdragon Qualcomm Video Collaboration VC3 Platform |
| Qualcomm, | Inc. | Snapdragon QXM1083 |
| Qualcomm, | Inc. | Snapdragon QXM1086 |
| Qualcomm, | Inc. | Snapdragon QXM1093 |
| Qualcomm, | Inc. | Snapdragon QXM1094 |
| Qualcomm, | Inc. | Snapdragon QXM1095 |
| Qualcomm, | Inc. | Snapdragon QXM1096 |
| Qualcomm, | Inc. | Snapdragon SA7255P |
| Qualcomm, | Inc. | Snapdragon SA7775P |
| Qualcomm, | Inc. | Snapdragon SA8255P |
| Qualcomm, | Inc. | Snapdragon SA8620P |
| Qualcomm, | Inc. | Snapdragon SA8770P |
| Qualcomm, | Inc. | Snapdragon SA9000P |
| Qualcomm, | Inc. | Snapdragon SAR1165P |
| Qualcomm, | Inc. | Snapdragon SAR2130P |
| Qualcomm, | Inc. | Snapdragon SC8380XP |
| Qualcomm, | Inc. | Snapdragon SD 8 Gen1 5G |
| Qualcomm, | Inc. | Snapdragon SD865 5G |
| Qualcomm, | Inc. | Snapdragon SDR753 |
| Qualcomm, | Inc. | Snapdragon SM6650P |
| Qualcomm, | Inc. | Snapdragon SM7635P |
| Qualcomm, | Inc. | Snapdragon SM7675 |
| Qualcomm, | Inc. | Snapdragon SM7675P |
| Qualcomm, | Inc. | Snapdragon SM8550P |
| Qualcomm, | Inc. | Snapdragon SM8635 |
| Qualcomm, | Inc. | Snapdragon SM8635P |
| Qualcomm, | Inc. | Snapdragon SM8650Q |
| Qualcomm, | Inc. | Snapdragon SM8750P |
| Qualcomm, | Inc. | Snapdragon Snapdragon 4 Gen 2 Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 6 Gen 4 Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 7 Gen 4 Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 7s Gen 3 Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 8 Elite |
| Qualcomm, | Inc. | Snapdragon Snapdragon 8 Elite Gen 5 |
| Qualcomm, | Inc. | Snapdragon Snapdragon 8 Gen 1 Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 8 Gen 2 Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 8 Gen 3 Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 8+ Gen 1 Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon 8+ Gen 2 Mobile Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon AR1 Gen 1 Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon AR1+ Gen 1 Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon Ride Elite |
| Qualcomm, | Inc. | Snapdragon Snapdragon XR2 5G Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon XR2+ Gen 1 Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon Cockpit Elite |
| Qualcomm, | Inc. | Snapdragon Snapdragon Reality Elite Platform |
| Qualcomm, | Inc. | Snapdragon SRV1H |
| Qualcomm, | Inc. | Snapdragon SRV1M |
| Qualcomm, | Inc. | Snapdragon SW-only |
| Qualcomm, | Inc. | Snapdragon SXR2230P |
| Qualcomm, | Inc. | Snapdragon SXR2250P |
| Qualcomm, | Inc. | Snapdragon TalynPlus |
| Qualcomm, | Inc. | Snapdragon WCD9370 |
| Qualcomm, | Inc. | Snapdragon WCD9375 |
| Qualcomm, | Inc. | Snapdragon WCD9378 |
| Qualcomm, | Inc. | Snapdragon WCD9380 |
| Qualcomm, | Inc. | Snapdragon WCD9385 |
| Qualcomm, | Inc. | Snapdragon WCD9390 |
| Qualcomm, | Inc. | Snapdragon WCD9395 |
| Qualcomm, | Inc. | Snapdragon WCN3950 |
| Qualcomm, | Inc. | Snapdragon WCN3988 |
| Qualcomm, | Inc. | Snapdragon WCN6450 |
| Qualcomm, | Inc. | Snapdragon WCN6650 |
| Qualcomm, | Inc. | Snapdragon WCN6755 |
| Qualcomm, | Inc. | Snapdragon WCN7860 |
| Qualcomm, | Inc. | Snapdragon WCN7861 |
| Qualcomm, | Inc. | Snapdragon WCN7880 |
| Qualcomm, | Inc. | Snapdragon WCN7881 |
| Qualcomm, | Inc. | Snapdragon WSA8810 |
| Qualcomm, | Inc. | Snapdragon WSA8815 |
| Qualcomm, | Inc. | Snapdragon WSA8830 |
| Qualcomm, | Inc. | Snapdragon WSA8832 |
| Qualcomm, | Inc. | Snapdragon WSA8835 |
| Qualcomm, | Inc. | Snapdragon WSA8840 |
| Qualcomm, | Inc. | Snapdragon WSA8845 |
| Qualcomm, | Inc. | Snapdragon WSA8845H |
| Qualcomm, | Inc. | Snapdragon X1E80100 |
| Qualcomm, | Inc. | Snapdragon XRV7209 |
| Qualcomm, | Inc. | Snapdragon XRV9209 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |