CVE-2026-25273
Received
Received - Intake
Memory Corruption in Qualcomm Camera Driver
Vulnerability report for CVE-2026-25273, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-06
Last updated on: 2026-10-06
Assigner: Qualcomm, Inc.
Description
Description
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Qualcomm, | Inc. | Snapdragon SDR753 |
| Qualcomm, | Inc. | Snapdragon FastConnect 6900 |
| Qualcomm, | Inc. | Snapdragon FastConnect 7800 |
| Qualcomm, | Inc. | Snapdragon Pandeiro |
| Qualcomm, | Inc. | Snapdragon QCM8838 |
| Qualcomm, | Inc. | Snapdragon SD865 5G |
| Qualcomm, | Inc. | Snapdragon Snapdragon 8 Elite Gen 5 |
| Qualcomm, | Inc. | Snapdragon Snapdragon XR2 5G Platform |
| Qualcomm, | Inc. | Snapdragon Snapdragon XR2+ Gen 1 Platform |
| Qualcomm, | Inc. | Snapdragon WCD9380 |
| Qualcomm, | Inc. | Snapdragon WCD9395 |
| Qualcomm, | Inc. | Snapdragon WCN7860 |
| Qualcomm, | Inc. | Snapdragon WCN7861 |
| Qualcomm, | Inc. | Snapdragon WCN7880 |
| Qualcomm, | Inc. | Snapdragon WCN7881 |
| Qualcomm, | Inc. | Snapdragon WSA8810 |
| Qualcomm, | Inc. | Snapdragon WSA8815 |
| Qualcomm, | Inc. | Snapdragon WSA8840 |
| Qualcomm, | Inc. | Snapdragon WSA8845 |
| Qualcomm, | Inc. | Snapdragon WSA8845H |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |