CVE-2026-25270
Snapdragon: Out-of-bounds Write in Camera Driver
Qualcomm, Inc. Snapdragon
CVSS
6.7MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.07%Chance of exploitation activity in the next 30 days, higher than 0% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
Text from CVE List
Affected versions 30
- Snapdragonaffected: FastConnect 6700CVE List
- Snapdragonaffected: FastConnect 6900CVE List
- Snapdragonaffected: FastConnect 7800CVE List
- Snapdragonaffected: KalpeniCVE List
- Snapdragonaffected: QCM6490CVE List
- Snapdragonaffected: Qualcomm Dragonwing QCM4490CVE List
- Snapdragonaffected: Qualcomm Video Collaboration VC3 PlatformCVE List
- Snapdragonaffected: SD865 5GCVE List
- Snapdragonaffected: Snapdragon 8 Gen 1 Mobile PlatformCVE List
- Snapdragonaffected: Snapdragon XR2 5G PlatformCVE List
- Snapdragonaffected: Snapdragon XR2+ Gen 1 PlatformCVE List
- Snapdragonaffected: SW5100CVE List
- Snapdragonaffected: SW5100PCVE List
- Snapdragonaffected: SXR2230PCVE List
- Snapdragonaffected: SXR2250PCVE List
- Snapdragonaffected: WCD9370CVE List
- Snapdragonaffected: WCD9375CVE List
- Snapdragonaffected: WCD9378CVE List
- Snapdragonaffected: WCD9380CVE List
- Snapdragonaffected: WCD9385CVE List
- Snapdragonaffected: WCN3950CVE List
- Snapdragonaffected: WCN3980CVE List
- Snapdragonaffected: WCN3988CVE List
- Snapdragonaffected: WSA8810CVE List
- Snapdragonaffected: WSA8815CVE List
- Snapdragonaffected: WSA8830CVE List
- Snapdragonaffected: WSA8832CVE List
- Snapdragonaffected: WSA8835CVE List
- Snapdragonaffected: WSA8840CVE List
- Snapdragonaffected: WSA8845CVE List