Back to the CVE list
CVE-2026-25273

Out-of-bounds Write in Camera Driver

CVSS score

6.7

EPSS probability

%0.1

Risk score

0.0

Published

6 d ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-25273 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-25273 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Qualcomm, Inc.Snapdragon View
2qualcommcongo firmware View
3qualcommcongo View
4qualcommcq8845s firmware View
5qualcommcq8845s View
6qualcommcq8850ns firmware View
7qualcommcq8850ns View
8qualcommfastconnect 6200 firmware View
9qualcommfastconnect 6200 View
10qualcommfastconnect 6900 firmware View
11qualcommfastconnect 6900 View
12qualcommfastconnect 7800 firmware View
13qualcommfastconnect 7800 View
14qualcommorne firmware View
15qualcommorne View
16qualcommpandeiro firmware View
17qualcommpandeiro View
18qualcommqmp1000 firmware View
19qualcommqmp1000 View
20qualcommqmp2001 firmware View
21qualcommqmp2001 View
22qualcommfastconnect 8800 mobile connectivity system firmware View
23qualcommfastconnect 8800 mobile connectivity system View
24qualcommsnapdragon 865 5g mobile platform firmware View
25qualcommsnapdragon 865 5g mobile platform View
26qualcommsm4875 firmware View
27qualcommsm4875 View
28qualcommsm6850 firmware View
29qualcommsm6850 View
30qualcommsm8845p firmware View
31qualcommsm8845p View
32qualcommsm8950 firmware View
33qualcommsm8950 View
34qualcommsm8950p firmware View
35qualcommsm8950p View
36qualcommsm8975 firmware View
37qualcommsm8975 View
38qualcommsm8975p firmware View
39qualcommsm8975p View
40qualcommsnapdragon 460 mobile platform firmware View
41qualcommsnapdragon 460 mobile platform View
42qualcommsnapdragon 662 mobile platform firmware View
43qualcommsnapdragon 662 mobile platform View
44qualcommsnapdragon 8 elite firmware View
45qualcommsnapdragon 8 elite View
46qualcommsnapdragon 8 elite gen 5 firmware View
47qualcommsnapdragon 8 elite gen 5 View
48qualcommsnapdragon 8 gen 5 firmware View
49qualcommsnapdragon 8 gen 5 View
50qualcommsnapdragon xr2 5g platform firmware View
51qualcommsnapdragon xr2 5g platform View
52qualcommsnapdragon xr2+ gen 1 platform firmware View
53qualcommsnapdragon xr2+ gen 1 platform View
54qualcommwcd9370 firmware View
55qualcommwcd9370 View
56qualcommwcd9375 firmware View
57qualcommwcd9375 View
58qualcommwcd9378 firmware View
59qualcommwcd9378 View
60qualcommwcd9380 firmware View
61qualcommwcd9380 View
62qualcommwcd9395 firmware View
63qualcommwcd9395 View
64qualcommwcn3950 firmware View
65qualcommwcn3950 View
66qualcommwcn3988 firmware View
67qualcommwcn3988 View
68qualcommwcn6450 firmware View
69qualcommwcn6450 View
70qualcommwcn7760 firmware View
71qualcommwcn7760 View
72qualcommwcn7860 firmware View
73qualcommwcn7860 View
74qualcommwcn7861 firmware View
75qualcommwcn7861 View
76qualcommwcn7880 firmware View
77qualcommwcn7880 View
78qualcommwcn7881 firmware View
79qualcommwcn7881 View
80qualcommwcn8841 firmware View
81qualcommwcn8841 View
82qualcommwsa8810 firmware View
83qualcommwsa8810 View
84qualcommwsa8815 firmware View
85qualcommwsa8815 View
86qualcommwsa8830 firmware View
87qualcommwsa8830 View
88qualcommwsa8832 firmware View
89qualcommwsa8832 View
90qualcommwsa8835 firmware View
91qualcommwsa8835 View
92qualcommwsa8840 firmware View
93qualcommwsa8840 View
94qualcommwsa8845 firmware View
95qualcommwsa8845 View
96qualcommwsa8845h firmware View
97qualcommwsa8845h View
98qualcommwsa8850 firmware View
99qualcommwsa8850 View
100qualcommwsa8850w firmware View
101qualcommwsa8850w View
102qualcommwsa8855c firmware View
103qualcommwsa8855c View
Total affected vendors: 2|Products: 103

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
6.7CVSS V31MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HNVD
6.7CVSS V3_1MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE CNA

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

1 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-25273 is associated with the following CWEs:

CWE-787: Out-of-bounds Write

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-25273 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsHigh
UserGerekmiyor

Official Sources and Advisories

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.htmlvendor-advisory

CVSS Vector Radar Chart

6.7 / 10
Attack VectorLocalComplexityLowPrivilegesHighUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredHigh privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama doğrulandı

1 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

QI
Qualcomm, Inc. logo
Qualcomm, Inc.
Q
qualcomm logo
qualcomm

Weakness Type (CWE & CAPEC)

CWE-787

Similar Vulnerabilities

6.5
CVE-2020-3702

Vulnerability in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking

QI
Qualcomm, Inc. logo
VendorQualcomm, Inc.ProductSnapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking+27 etkilenen
Patch status unknownEPSS %06 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-25273"