6.7Medium

CVE-2026-25272Out-of-bounds Write in Camera Driver

Qualcomm, Inc. Snapdragon Published: (1 month ago)

Description

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

Weakness (CWE): CWE-787

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
qualcomm cologne firmware —
qualcomm cq2390m firmware —
qualcomm cq2390s firmware —
qualcomm cq8750m firmware —
qualcomm cq8845s firmware —
qualcomm cq8850ns firmware —
qualcomm fastconnect 6200 firmware —
qualcomm fastconnect 6700 firmware —
qualcomm fastconnect 6900 firmware —
qualcomm fastconnect 7800 firmware —
qualcomm g2 gen 1 firmware —
qualcomm g3x gen 2 firmware —
qualcomm iq-615 firmware —
qualcomm iq-8275 firmware —
qualcomm iq-9075 firmware —
qualcomm lemans au lgit firmware —
qualcomm lemansau firmware —
qualcomm mbm415 firmware —
qualcomm mbm715 firmware —
qualcomm milos firmware —
qualcomm milos iot firmware —
qualcomm monaco iot firmware —
qualcomm netrani firmware —
qualcomm orne firmware —
qualcomm palawan25 firmware —
qualcomm pandeiro firmware —
qualcomm qam8255p firmware —
qualcomm qamsrv1h firmware —
qualcomm qamsrv1m firmware —
qualcomm qca6391 firmware —
qualcomm qca6595 firmware —
qualcomm qca6595au firmware —
qualcomm qca6678aq firmware —
qualcomm qca6698aq firmware —
qualcomm qca6698au firmware —
qualcomm qca6797aq firmware —
qualcomm qca8695au firmware —
qualcomm qcm4490 firmware —
qualcomm qcm5430 firmware —
qualcomm qcm6490 firmware —
qualcomm qcm8838 firmware —
qualcomm qcn9011 firmware —
qualcomm qcn9012 firmware —
qualcomm qcs4490 firmware —
qualcomm qcs6690 firmware —
qualcomm qcs8550 firmware —
qualcomm qln1083bd firmware —
qualcomm qln1086bd firmware —
qualcomm qmp1000 firmware —
qualcomm qmp2001 firmware —
qualcomm qna715 firmware —
qualcomm qpa1083bd firmware —
qualcomm qpa1086bd firmware —
qualcomm qxm1083 firmware —
qualcomm qxm1086 firmware —
qualcomm qxm1093 firmware —
qualcomm qxm1094 firmware —
qualcomm qxm1095 firmware —
qualcomm qxm1096 firmware —
qualcomm sa7255p firmware —
qualcomm sa7775p firmware —
qualcomm sa8255p firmware —
qualcomm sa8620p firmware —
qualcomm sa8770p firmware —
qualcomm sa9000p firmware —
qualcomm sar1165p firmware —
qualcomm sar2130p firmware —
qualcomm sc8380xp firmware —
qualcomm sdr753 firmware —
qualcomm sm4875 firmware —
qualcomm sm6450p firmware —
qualcomm sm6475p firmware —
qualcomm sm6475q firmware —
qualcomm sm6650p firmware —
qualcomm sm6850 firmware —
qualcomm sm7435 firmware —
qualcomm sm7435p firmware —
qualcomm sm7525 firmware —
qualcomm sm7550 firmware —
qualcomm sm7550p firmware —
qualcomm sm7635p firmware —
qualcomm sm7675 firmware —
qualcomm sm7675p firmware —
qualcomm sm7750p firmware —
qualcomm sm8475p firmware —
qualcomm sm8550p firmware —
qualcomm sm8635 firmware —
qualcomm sm8635p firmware —
qualcomm sm8650q firmware —
qualcomm sm8735p firmware —
qualcomm sm8750p firmware —
qualcomm sm8845p firmware —
Qualcomm, Inc. Snapdragon Cologne, CQ7790, CQ8725S, CQ8750M, FastConnect 6700, FastConnect 6900, FastConnect 7800, IQ10 Series, IQ6 Series Platform, IQ8 Series Platform, IQ9 Series Platform, LeMans_AU_LGIT, LeMansAU, MBM415, MBM715, Milos, Monaco_IOT, Orne, Palawan25, Pandeiro, QAM8255P, QAMSRV1H, QAMSRV1M, QCA6391, QCA6595, QCA6595AU, QCA6678AQ, QCA6698AQ, QCA6698AU, QCA6797AQ, QCA8695AU, QCM5430, QCM6490, QCM8550, QCM8838, QCN9011, QCN9012, QCN9274, QCS8550, QLN1083BD, QLN1086BD, QMP1000, QPA1083BD, QPA1086BD, Qualcomm Dragonwing Q-6690, Qualcomm Dragonwing Q-7790, Qualcomm Dragonwing Q-8845, Qualcomm Dragonwing QCM4
qualcomm snapdragon 4 gen 2 mobile platform firmware —
qualcomm snapdragon 6 gen 1 mobile platform firmware —
qualcomm snapdragon 6 gen 3 mobile platform firmware —
qualcomm snapdragon 6 gen 4 mobile platform firmware —
qualcomm snapdragon 7 gen 1 mobile platform firmware —
qualcomm snapdragon 7 gen 4 mobile platform firmware —
qualcomm snapdragon 7+ gen 2 mobile platform firmware —
qualcomm snapdragon 7s gen 3 mobile platform firmware —
qualcomm snapdragon 8 elite firmware —
qualcomm snapdragon 8 elite gen 5 firmware —
qualcomm snapdragon 8 gen 1 mobile platform firmware —
qualcomm snapdragon 8 gen 2 mobile platform firmware —
qualcomm snapdragon 8 gen 3 mobile platform firmware —
qualcomm snapdragon 8 gen 5 firmware —
qualcomm snapdragon 8 gen1 5g firmware —
qualcomm snapdragon 8+ gen 1 mobile platform firmware —
qualcomm snapdragon 8+ gen 2 mobile platform firmware —
qualcomm snapdragon 865 5g mobile platform firmware —
qualcomm snapdragon ar1 gen 1 platform firmware —
qualcomm snapdragon ar1+ gen 1 platform firmware —
qualcomm snapdragon cockpit elite firmware —
qualcomm snapdragon g1 gen 2 gaming platform firmware —
qualcomm snapdragon reality elite platform firmware —
qualcomm snapdragon ride elite firmware —
qualcomm snapdragon xr2 5g platform firmware —
qualcomm snapdragon xr2+ gen 1 platform firmware —
qualcomm srv1h firmware —
qualcomm srv1m firmware —
qualcomm sxr2230p firmware —
qualcomm sxr2250p firmware —
qualcomm video collaboration vc3 platform firmware —
qualcomm wcd9370 firmware —
qualcomm wcd9371 firmware —
qualcomm wcd9375 firmware —
qualcomm wcd9378 firmware —
qualcomm wcd9380 firmware —
qualcomm wcd9385 firmware —
qualcomm wcd9390 firmware —
qualcomm wcd9395 firmware —
qualcomm wcn3950 firmware —
qualcomm wcn3988 firmware —
qualcomm wcn6450 firmware —
qualcomm wcn6650 firmware —
qualcomm wcn6755 firmware —
qualcomm wcn7760 firmware —
qualcomm wcn7860 firmware —
qualcomm wcn7861 firmware —
qualcomm wcn7880 firmware —
qualcomm wcn7881 firmware —
qualcomm wsa8810 firmware —
qualcomm wsa8815 firmware —
qualcomm wsa8830 firmware —
qualcomm wsa8832 firmware —
qualcomm wsa8835 firmware —
qualcomm wsa8840 firmware —
qualcomm wsa8845 firmware —
qualcomm wsa8845h firmware —
qualcomm wsa8850 firmware —
qualcomm wsa8850w firmware —
qualcomm wsa8855c firmware —
qualcomm x1e80100 firmware —
qualcomm xrv7209 firmware —
qualcomm xrv9209 firmware —

References and patches

CPE matches (NVD) (60)

  • cpe:2.3:o:qualcomm:snapdragon_g1_gen_2_gaming_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:cologne_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:cq2390m_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:cq2390s_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:cq8750m_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm7675_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm7675p_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm7750p_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm8475p_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm8635_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm8635p_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm8650q_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm8735p_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm8750p_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm8845p_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_4_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_6_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_6_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_6_gen_4_mobile_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_7_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_7_gen_4_mobile_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_7\+_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_7s_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_8_elite_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_8_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_8_gen_5_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_8\+_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_8\+_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_ar1_gen_1_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_ar1\+_gen_1_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_ride_elite_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_xr2\+_gen_1_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_cockpit_elite_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_reality_elite_platform_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:srv1h_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:srv1m_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sxr2250p_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9371_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:cq8845s_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:cq8850ns_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:g2_gen_1_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:g3x_gen_2_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:iq-615_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:iq-8275_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:iq-9075_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:lemans_au_lgit_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:lemansau_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:mbm415_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:mbm715_firmware:-:*:*:*:*:*:*:*