Back to the CVE list
CVE-2026-25270

Out-of-bounds Write in Camera Driver

CVSS score

6.7

EPSS probability

%0.1

Risk score

0.0

Published

6 d ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-25270 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-25270 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Qualcomm, Inc.Snapdragon View
2qualcommsnapdragon g1 gen 2 gaming platform firmware View
3qualcommsnapdragon g1 gen 2 gaming platform View
4qualcommcologne firmware View
5qualcommcologne View
6qualcommcongo firmware View
7qualcommcongo View
8qualcommcq2390m firmware View
9qualcommcq2390m View
10qualcommcq2390s firmware View
11qualcommcq2390s View
12qualcommsc8380xp firmware View
13qualcommsc8380xp View
14qualcommsnapdragon 8 gen1 5g firmware View
15qualcommsnapdragon 8 gen1 5g View
16qualcommsnapdragon 662 mobile platform firmware View
17qualcommsnapdragon 662 mobile platform View
18qualcommsnapdragon 865 5g mobile platform firmware View
19qualcommsnapdragon 865 5g mobile platform View
20qualcommsdr753 firmware View
21qualcommsdr753 View
22qualcommsm4850 firmware View
23qualcommsm4850 View
24qualcommsm4850p firmware View
25qualcommsm4850p View
26qualcommsm4875 firmware View
27qualcommsm4875 View
28qualcommsm6225p firmware View
29qualcommsm6225p View
30qualcommsm6450p firmware View
31qualcommsm6450p View
32qualcommsm6475p firmware View
33qualcommsm6475p View
34qualcommsm6475q firmware View
35qualcommsm6475q View
36qualcommsm6650p firmware View
37qualcommsm6650p View
38qualcommsm6850 firmware View
39qualcommsm6850 View
40qualcommsm7325p firmware View
41qualcommsm7325p View
42qualcommsm7435 firmware View
43qualcommsm7435 View
44qualcommsm7435p firmware View
45qualcommsm7435p View
46qualcommsm7525 firmware View
47qualcommsm7525 View
48qualcommsm7550 firmware View
49qualcommsm7550 View
50qualcommsm7550p firmware View
51qualcommsm7550p View
52qualcommsm7635p firmware View
53qualcommsm7635p View
54qualcommsm7675 firmware View
55qualcommsm7675 View
56qualcommsm7675p firmware View
57qualcommsm7675p View
58qualcommsm7750p firmware View
59qualcommsm7750p View
60qualcommsm8475p firmware View
61qualcommsm8475p View
62qualcommsm8550p firmware View
63qualcommsm8550p View
64qualcommsm8635 firmware View
65qualcommsm8635 View
66qualcommsm8635p firmware View
67qualcommsm8635p View
68qualcommsm8650q firmware View
69qualcommsm8650q View
70qualcommsm8735p firmware View
71qualcommsm8735p View
72qualcommsm8750p firmware View
73qualcommsm8750p View
74qualcommsm8845p firmware View
75qualcommsm8845p View
76qualcommsm8950 firmware View
77qualcommsm8950 View
78qualcommsm8950p firmware View
79qualcommsm8950p View
80qualcommsm8975 firmware View
81qualcommsm8975 View
82qualcommsm8975p firmware View
83qualcommsm8975p View
84qualcommsmart audio 400 platform firmware View
85qualcommsmart audio 400 platform View
86qualcommsnapdragon 4 gen 1 mobile platform firmware View
87qualcommsnapdragon 4 gen 1 mobile platform View
88qualcommsnapdragon 4 gen 2 mobile platform firmware View
89qualcommsnapdragon 4 gen 2 mobile platform View
90qualcommsnapdragon 460 mobile platform firmware View
91qualcommsnapdragon 460 mobile platform View
92qualcommcq7790 firmware View
93qualcommcq7790 View
94qualcommcq8725s firmware View
95qualcommcq8725s View
96qualcommcq8750m firmware View
97qualcommcq8750m View
98qualcommcq8845s firmware View
99qualcommcq8845s View
100qualcommcq8850ns firmware View
101qualcommcq8850ns View
102qualcommcsra6620 firmware View
103qualcommcsra6620 View
104qualcommcsra6640 firmware View
105qualcommcsra6640 View
106qualcommfastconnect 6200 firmware View
107qualcommfastconnect 6200 View
108qualcommfastconnect 6700 firmware View
109qualcommfastconnect 6700 View
110qualcommfastconnect 6900 firmware View
111qualcommfastconnect 6900 View
112qualcommfastconnect 7800 firmware View
113qualcommfastconnect 7800 View
114qualcommg1 gen 1 firmware View
115qualcommg1 gen 1 View
116qualcommg2 gen 1 firmware View
117qualcommg2 gen 1 View
118qualcommg3x gen 2 firmware View
119qualcommg3x gen 2 View
120qualcommiq-615 firmware View
121qualcommiq-615 View
122qualcommiq-8275 firmware View
123qualcommiq-8275 View
124qualcommiq-9075 firmware View
125qualcommiq-9075 View
126qualcommkalpeni firmware View
127qualcommkalpeni View
128qualcommlemans au lgit firmware View
129qualcommlemans au lgit View
130qualcommlemansau firmware View
131qualcommlemansau View
132qualcommmbm415 firmware View
133qualcommmbm415 View
134qualcommmbm715 firmware View
135qualcommmbm715 View
136qualcommmilos firmware View
137qualcommmilos View
138qualcommmilos iot firmware View
139qualcommmilos iot View
140qualcommmonaco iot firmware View
141qualcommmonaco iot View
142qualcommnetrani firmware View
143qualcommnetrani View
144qualcommorne firmware View
145qualcommorne View
146qualcommpalawan25 firmware View
147qualcommpalawan25 View
148qualcommpandeiro firmware View
149qualcommpandeiro View
150qualcommq-4390 firmware View
151qualcommq-4390 View
152qualcommqam8255p firmware View
153qualcommqam8255p View
154qualcommqamsrv1h firmware View
155qualcommqamsrv1h View
156qualcommqamsrv1m firmware View
157qualcommqamsrv1m View
158qualcommqca6391 firmware View
159qualcommqca6391 View
160qualcommqca6595au firmware View
161qualcommqca6595au View
162qualcommqca6678aq firmware View
163qualcommqca6678aq View
164qualcommqca6698aq firmware View
165qualcommqca6698aq View
166qualcommqca6698au firmware View
167qualcommqca6698au View
168qualcommqca6797aq firmware View
169qualcommqca6797aq View
170qualcommqca8695au firmware View
171qualcommqca8695au View
172qualcommsxr2250p firmware View
173qualcommsxr2250p View
174qualcommthemisto firmware View
175qualcommthemisto View
176qualcommwcd9335 firmware View
177qualcommwcd9335 View
178qualcommwcd9370 firmware View
179qualcommwcd9370 View
180qualcommwcd9371 firmware View
181qualcommwcd9371 View
182qualcommwcd9375 firmware View
183qualcommwcd9375 View
184qualcommwcd9378 firmware View
185qualcommwcd9378 View
186qualcommwcd9380 firmware View
187qualcommwcd9380 View
188qualcommwcd9385 firmware View
189qualcommwcd9385 View
190qualcommwcd9390 firmware View
191qualcommwcd9390 View
192qualcommwcd9395 firmware View
193qualcommwcd9395 View
194qualcommwcn3910 firmware View
195qualcommwcn3910 View
196qualcommwcn3950 firmware View
197qualcommwcn3950 View
198qualcommwcn3980 firmware View
199qualcommwcn3980 View
200qualcommwcn3988 firmware View
Total affected vendors: 2|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
6.7CVSS V31MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HNVD
6.7CVSS V3_1MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE CNA

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

1 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-25270 is associated with the following CWEs:

CWE-787: Out-of-bounds Write

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-25270 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsHigh
UserGerekmiyor

Official Sources and Advisories

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.htmlvendor-advisory

CVSS Vector Radar Chart

6.7 / 10
Attack VectorLocalComplexityLowPrivilegesHighUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredHigh privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama doğrulandı

1 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

QI
Qualcomm, Inc. logo
Qualcomm, Inc.
Q
qualcomm logo
qualcomm

Weakness Type (CWE & CAPEC)

CWE-787

Similar Vulnerabilities

6.5
CVE-2020-3702

Vulnerability in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking

QI
Qualcomm, Inc. logo
VendorQualcomm, Inc.ProductSnapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking+27 etkilenen
Patch status unknownEPSS %06 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-25270"