CVE-2026-25270: CWE-787: Out-of-bounds Write in Qualcomm, Inc. Snapdragon

This vulnerability (CVE-2026-25270) is an out-of-bounds write (CWE-787) in the Android Camera driver of Qualcomm Snapdragon products. It occurs when processing command buffer requests that contain invalid length parameters, leading to memory corruption. The CVSS 3.1 score is 6.7, indicating a medium severity with high impact on confidentiality, integrity, and availability. The affected products are various Qualcomm Snapdragon chipsets and wireless components explicitly listed. There is no information about available patches or vendor advisories in the provided data.

Successful exploitation of this vulnerability could lead to memory corruption, potentially allowing an attacker with high privileges to compromise confidentiality, integrity, and availability of the affected system. However, exploitation requires local access with high privileges and no user interaction. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Qualcomm's advisories for updates. No specific mitigations are detailed in the available data.