01 Record
CVE-2026-25269
Out-of-bounds Write in Camera Driver
MediumPUBLISHEDCNA: qualcomm
CNA base score6.7 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
02 Description
Out-of-bounds Write in Camera Driver
03 Exploitation and scoring
- Exploitation
- Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
- SSVC decision
- ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
- AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
- Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.
- EPSS probability
- 0.07% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 0.0% of scored records. A rank, not a probability.
- NVD base score
- 6.7 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- NVD analysis status
- Analyzed. NVD last modified this record on 2026-10-09.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2026-10-06 06:29Z23 DAYS AGO
- Last updated
- 2026-10-07 03:55Z22 DAYS AGO
- Reserved
- 2026-02-02
- Assigning CNA
- qualcomm
- Record state
- PUBLISHED
- Severity
- Medium (CVSS 6.7)
- CNA CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787Out-of-bounds WriteBase
- Data version
- 5.2
- Document digest
- 19bb1ae33a7b61f93fb69c0f79fe00a225866456376f254dfc1749c8520e4ac3
05 Affected products
VendorProductVersionsPlatforms
Qualcomm, Inc.SnapdragonCologne, CQ7790, CQ8725S, CQ8750M, FastConnect 6700, FastConnect 6900, FastConnect 7800, IQ10 Series, IQ6 Series Platform, IQ8 Series Platform, IQ9 Series Platform, LeMans_AU_LGIT, LeMansAU, MBM715, Milos, Monaco_IOT, Orne, Palawan25, Pandeiro, QAM8255P, QAMSRV1H, QAMSRV1M, QCA6391, QCA6595, QCA6595AU, QCA6678AQ, QCA6698AQ, QCA6698AU, QCA6797AQ, QCA8695AU, QCM5430, QCM6490, QCM8550, QCM8838, QCN9011, QCN9012, QCN9274, QCS8550, QLN1083BD, QLN1086BD, QMP1000, QPA1083BD, QPA1086BD, Qualcomm Dragonwing Q-6690, Qualcomm Dragonwing Q-7790, Qualcomm Dragonwing Q-8845, Qualcomm Dragonwing QCM4490, Qualcomm Video Collaboration VC3 Platform, QXM1083, QXM1086, QXM1093, QXM1094, QXM1095, QXM1096, SA7255P, SA7775P, SA8255P, SA8620P, SA8770P, SA9000P, SAR1165P, SAR2130P, SC8380XP, SD 8 Gen1 5G, SD865 5G, SDR753, SM6650P, SM7635P, SM7675, SM7675P, SM8550P, SM8635, SM8635P, SM8650Q, SM8750P, Snapdragon 4 Gen 2 Mobile Platform, Snapdragon 6 Gen 4 Mobile Platform, Snapdragon 7 Gen 4 Mobile Platform, Snapdragon 7s Gen 3 Mobile Platform, Snapdragon 8 Elite, Snapdragon 8 Elite Gen 5, Snapdragon 8 Gen 1 Mobile Platform, Snapdragon 8 Gen 2 Mobile Platform, Snapdragon 8 Gen 3 Mobile Platform, Snapdragon 8+ Gen 1 Mobile Platform, Snapdragon 8+ Gen 2 Mobile Platform, Snapdragon AR1 Gen 1 Platform, Snapdragon AR1+ Gen 1 Platform, Snapdragon Ride Elite, Snapdragon XR2 5G Platform, Snapdragon XR2+ Gen 1 Platform, Snapdragon Cockpit Elite, Snapdragon Reality Elite Platform, SRV1H, SRV1M, SW-only, SXR2230P, SXR2250P, TalynPlus, WCD9370, WCD9375, WCD9378, WCD9380, WCD9385, WCD9390, WCD9395, WCN3950, WCN3988, WCN6450, WCN6650, WCN6755, WCN7860, WCN7861, WCN7880, WCN7881, WSA8810, WSA8815, WSA8830, WSA8832, WSA8835, WSA8840, WSA8845, WSA8845H, X1E80100, XRV7209, XRV9209Snapdragon Auto, Snapdragon CCW, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WBC