Out-of-bounds Write in Camera Driver
Summary
| CVE | CVE-2026-25273 |
|---|---|
| State | PUBLISHED |
| Assigner | qualcomm |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-10-06 07:16:57 UTC |
| Updated | 2026-10-09 14:11:13 UTC |
| Description | Memory Corruption when processing camera operations due to out-of-bounds write during driver updates. |
Risk And Classification
Primary CVSS: v3.1 6.7 MEDIUM from [email protected]
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.000730000 probability, percentile 0.000600000 (date 2026-10-11)
Problem Types: CWE-787 | CWE-787 CWE-787: Out-of-bounds Write
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 6.7 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | CNA | CVSS | 6.7 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
HighUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Congo | - | All | All | All |
| Operating System | Qualcomm | Congo Firmware | - | All | All | All |
| Hardware | Qualcomm | Cq8845s | - | All | All | All |
| Operating System | Qualcomm | Cq8845s Firmware | - | All | All | All |
| Hardware | Qualcomm | Cq8850ns | - | All | All | All |
| Operating System | Qualcomm | Cq8850ns Firmware | - | All | All | All |
| Hardware | Qualcomm | Fastconnect 6200 | - | All | All | All |
| Operating System | Qualcomm | Fastconnect 6200 Firmware | - | All | All | All |
| Hardware | Qualcomm | Fastconnect 6900 | - | All | All | All |
| Operating System | Qualcomm | Fastconnect 6900 Firmware | - | All | All | All |
| Hardware | Qualcomm | Fastconnect 7800 | - | All | All | All |
| Operating System | Qualcomm | Fastconnect 7800 Firmware | - | All | All | All |
| Hardware | Qualcomm | Fastconnect 8800 Mobile Connectivity System | - | All | All | All |
| Operating System | Qualcomm | Fastconnect 8800 Mobile Connectivity System Firmware | - | All | All | All |
| Hardware | Qualcomm | Orne | - | All | All | All |
| Operating System | Qualcomm | Orne Firmware | - | All | All | All |
| Hardware | Qualcomm | Pandeiro | - | All | All | All |
| Operating System | Qualcomm | Pandeiro Firmware | - | All | All | All |
| Hardware | Qualcomm | Qmp1000 | - | All | All | All |
| Operating System | Qualcomm | Qmp1000 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qmp2001 | - | All | All | All |
| Operating System | Qualcomm | Qmp2001 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm4875 | - | All | All | All |
| Operating System | Qualcomm | Sm4875 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm6850 | - | All | All | All |
| Operating System | Qualcomm | Sm6850 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm8845p | - | All | All | All |
| Operating System | Qualcomm | Sm8845p Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm8950 | - | All | All | All |
| Hardware | Qualcomm | Sm8950p | - | All | All | All |
| Operating System | Qualcomm | Sm8950p Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm8950 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm8975 | - | All | All | All |
| Hardware | Qualcomm | Sm8975p | - | All | All | All |
| Operating System | Qualcomm | Sm8975p Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm8975 Firmware | - | All | All | All |
| Hardware | Qualcomm | Snapdragon 460 Mobile Platform | - | All | All | All |
| Operating System | Qualcomm | Snapdragon 460 Mobile Platform Firmware | - | All | All | All |
| Hardware | Qualcomm | Snapdragon 662 Mobile Platform | - | All | All | All |
| Operating System | Qualcomm | Snapdragon 662 Mobile Platform Firmware | - | All | All | All |
| Hardware | Qualcomm | Snapdragon 865 5g Mobile Platform | - | All | All | All |
| Operating System | Qualcomm | Snapdragon 865 5g Mobile Platform Firmware | - | All | All | All |
| Hardware | Qualcomm | Snapdragon 8 Elite | - | All | All | All |
| Operating System | Qualcomm | Snapdragon 8 Elite Firmware | - | All | All | All |
| Hardware | Qualcomm | Snapdragon 8 Elite Gen 5 | - | All | All | All |
| Operating System | Qualcomm | Snapdragon 8 Elite Gen 5 Firmware | - | All | All | All |
| Hardware | Qualcomm | Snapdragon 8 Gen 5 | - | All | All | All |
| Operating System | Qualcomm | Snapdragon 8 Gen 5 Firmware | - | All | All | All |
| Hardware | Qualcomm | Snapdragon Xr2 Gen 1 Platform | - | All | All | All |
| Operating System | Qualcomm | Snapdragon Xr2 Gen 1 Platform Firmware | - | All | All | All |
| Hardware | Qualcomm | Snapdragon Xr2 5g Platform | - | All | All | All |
| Operating System | Qualcomm | Snapdragon Xr2 5g Platform Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcd9370 | - | All | All | All |
| Operating System | Qualcomm | Wcd9370 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcd9375 | - | All | All | All |
| Operating System | Qualcomm | Wcd9375 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcd9378 | - | All | All | All |
| Operating System | Qualcomm | Wcd9378 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcd9380 | - | All | All | All |
| Operating System | Qualcomm | Wcd9380 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcd9395 | - | All | All | All |
| Operating System | Qualcomm | Wcd9395 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcn3950 | - | All | All | All |
| Operating System | Qualcomm | Wcn3950 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcn3988 | - | All | All | All |
| Operating System | Qualcomm | Wcn3988 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcn6450 | - | All | All | All |
| Operating System | Qualcomm | Wcn6450 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcn7760 | - | All | All | All |
| Operating System | Qualcomm | Wcn7760 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcn7860 | - | All | All | All |
| Operating System | Qualcomm | Wcn7860 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcn7861 | - | All | All | All |
| Operating System | Qualcomm | Wcn7861 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcn7880 | - | All | All | All |
| Operating System | Qualcomm | Wcn7880 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcn7881 | - | All | All | All |
| Operating System | Qualcomm | Wcn7881 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wcn8841 | - | All | All | All |
| Operating System | Qualcomm | Wcn8841 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wsa8810 | - | All | All | All |
| Operating System | Qualcomm | Wsa8810 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wsa8815 | - | All | All | All |
| Operating System | Qualcomm | Wsa8815 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wsa8830 | - | All | All | All |
| Operating System | Qualcomm | Wsa8830 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wsa8832 | - | All | All | All |
| Operating System | Qualcomm | Wsa8832 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wsa8835 | - | All | All | All |
| Operating System | Qualcomm | Wsa8835 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wsa8840 | - | All | All | All |
| Operating System | Qualcomm | Wsa8840 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wsa8845 | - | All | All | All |
| Hardware | Qualcomm | Wsa8845h | - | All | All | All |
| Operating System | Qualcomm | Wsa8845h Firmware | - | All | All | All |
| Operating System | Qualcomm | Wsa8845 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wsa8850 | - | All | All | All |
| Hardware | Qualcomm | Wsa8850w | - | All | All | All |
| Operating System | Qualcomm | Wsa8850w Firmware | - | All | All | All |
| Operating System | Qualcomm | Wsa8850 Firmware | - | All | All | All |
| Hardware | Qualcomm | Wsa8855c | - | All | All | All |
| Operating System | Qualcomm | Wsa8855c Firmware | - | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Qualcomm Inc. | Snapdragon | affected FastConnect 6900 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected FastConnect 7800 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected Pandeiro | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected QCM8838 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected SD865 5G | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected SDR753 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected Snapdragon 8 Elite Gen 5 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected Snapdragon XR2 5G Platform | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected Snapdragon XR2+ Gen 1 Platform | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected WCD9380 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected WCD9395 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected WCN7860 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected WCN7861 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected WCN7880 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected WCN7881 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected WSA8810 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected WSA8815 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected WSA8840 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected WSA8845 | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
| CNA | Qualcomm Inc. | Snapdragon | affected WSA8845H | Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulleti... | [email protected] | docs.qualcomm.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.