This vulnerability (CVE-2026-25261) is classified as CWE-822, which involves untrusted pointer dereference leading to memory corruption. It occurs in Qualcomm Snapdragon devices when processing rear sensor IOCTL calls. The CVSS v3.1 score is 6.7 with vector AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating local attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The affected versions are specific Qualcomm Snapdragon models: IQX5121, IQX7181, QCA0000, QCM5430, QCM6490, WCD9370, WCD9375, WCD9380, WCD9385, WSA8830, WSA8835, WSA8840, and WSA8845. There is no information about available patches or vendor advisories.

Successful exploitation can lead to memory corruption, potentially resulting in full compromise of confidentiality, integrity, and availability of the affected device. The vulnerability requires local access with high privileges and does not require user interaction. The impact is rated high for confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local privileged access to affected devices and monitor for unusual activity related to rear sensor IOCTL calls.