Description
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVSS Metrics
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Attack Vector
- local
- Complexity
- low
- Privileges
- high
- User Action
- none
- Scope
- unchanged
- Confidentiality
- high
- Integrity
- high
- Availability
- high
- Weaknesses
- CWE-120
Metadata
- Primary Vendor
- QUALCOMM
- Published
- 1/7/2026
- Last Modified
- 1/27/2026
- Source
- NIST NVD
- Note: Verify all details with official vendor sources before applying patches.
Affected Products
qualcomm : csra6620_firmwarequalcomm : csra6640_firmwarequalcomm : fastconnect_6200_firmwarequalcomm : fastconnect_6700_firmwarequalcomm : fastconnect_6900_firmwarequalcomm : sa7255p_firmwarequalcomm : sa7775p_firmwarequalcomm : sa8255p_firmwarequalcomm : sa8620p_firmwarequalcomm : sa8650p_firmwarequalcomm : sa8770p_firmwarequalcomm : sa8775p_firmwarequalcomm : sa9000p_firmwarequalcomm : sd_8_gen1_5g_firmwarequalcomm : sg4150p_firmwarequalcomm : sg8275_firmwarequalcomm : sg8275p_firmwarequalcomm : sm4635_firmwarequalcomm : sm6225p_firmwarequalcomm : sm6475_firmwarequalcomm : sm6650_firmwarequalcomm : sm6650p_firmwarequalcomm : sm7325p_firmwarequalcomm : sm7435_firmwarequalcomm : sm7550_firmwarequalcomm : sm7550p_firmwarequalcomm : sm7635_firmwarequalcomm : sm7635p_firmwarequalcomm : sm7675_firmwarequalcomm : sm7675p_firmwarequalcomm : sm8475p_firmwarequalcomm : sm8550p_firmwarequalcomm : sm8635_firmwarequalcomm : sm8635p_firmwarequalcomm : sm8650q_firmwarequalcomm : sm8735_firmwarequalcomm : sm8750_firmwarequalcomm : sm8750p_firmwarequalcomm : smart_audio_400_platform_firmwarequalcomm : snapdragon_4_gen_1_mobile_platform_firmwarequalcomm : snapdragon_4_gen_2_mobile_platform_firmwarequalcomm : snapdragon_460_mobile_platform_firmwarequalcomm : snapdragon_480_5g_mobile_platform_firmwarequalcomm : snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmwarequalcomm : snapdragon_6_gen_1_mobile_platform_firmwarequalcomm : fastconnect_7800_firmwarequalcomm : flight_rb5_5g_platform_firmwarequalcomm : qam8255p_firmwarequalcomm : qam8650p_firmwarequalcomm : qam8775p_firmwarequalcomm : qamsrv1h_firmwarequalcomm : qamsrv1m_firmwarequalcomm : qca6391_firmwarequalcomm : qca6595_firmwarequalcomm : qca6595au_firmwarequalcomm : qca6678aq_firmwarequalcomm : qca6698aq_firmwarequalcomm : qca6698au_firmwarequalcomm : qca6797aq_firmwarequalcomm : qcm2290_firmwarequalcomm : qcm4490_firmwarequalcomm : qcm5430_firmwarequalcomm : qcm6490_firmwarequalcomm : qcm8550_firmwarequalcomm : qcn9011_firmwarequalcomm : qcn9012_firmwarequalcomm : qcs2290_firmwarequalcomm : qcs410_firmwarequalcomm : qcs4490_firmwarequalcomm : qcs5430_firmwarequalcomm : qcs610_firmwarequalcomm : qcs615_firmwarequalcomm : qcs6490_firmwarequalcomm : qcs7230_firmwarequalcomm : qcs8250_firmwarequalcomm : qcs8550_firmwarequalcomm : qcs9100_firmwarequalcomm : qmp1000_firmwarequalcomm : qrb5165m_firmwarequalcomm : qrb5165n_firmwarequalcomm : video_collaboration_vc1_platform_firmwarequalcomm : video_collaboration_vc3_platform_firmwarequalcomm : video_collaboration_vc5_platform_firmwarequalcomm : robotics_rb2_platform_firmwarequalcomm : robotics_rb5_platform_firmwarequalcomm : snapdragon_662_mobile_platform_firmwarequalcomm : snapdragon_680_4g_mobile_platform_firmwarequalcomm : snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmwarequalcomm : snapdragon_695_5g_mobile_platform_firmwarequalcomm : snapdragon_7_gen_1_mobile_platform_firmwarequalcomm : snapdragon_7\+_gen_2_mobile_platform_firmwarequalcomm : snapdragon_778g_5g_mobile_platform_firmwarequalcomm : snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\)_firmwarequalcomm : snapdragon_782g_mobile_platform_\(sm7325-af\)_firmwarequalcomm : snapdragon_7c\+_gen_3_compute_firmwarequalcomm : snapdragon_8_gen_1_mobile_platform_firmwarequalcomm : snapdragon_8_gen_2_mobile_platform_firmwarequalcomm : snapdragon_8_gen_3_mobile_platform_firmwarequalcomm : snapdragon_8\+_gen_1_mobile_platform_firmwarequalcomm : snapdragon_8\+_gen_2_mobile_platform_firmwarequalcomm : snapdragon_888_5g_mobile_platform_firmwarequalcomm : snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)_firmwarequalcomm : snapdragon_ar1_gen_1_platform_firmwarequalcomm : snapdragon_ar1_gen_1_platform_\"luna1\"_firmwarequalcomm : snapdragon_ar2_gen_1_platform_firmwarequalcomm : snapdragon_w5\+_gen_1_wearable_platform_firmwarequalcomm : srv1h_firmwarequalcomm : srv1m_firmwarequalcomm : ssg2115p_firmwarequalcomm : ssg2125p_firmwarequalcomm : sw5100_firmwarequalcomm : sw5100p_firmwarequalcomm : sxr1230p_firmwarequalcomm : sxr2230p_firmwarequalcomm : sxr2250p_firmwarequalcomm : sxr2330p_firmwarequalcomm : sxr2350p_firmwarequalcomm : wcd9335_firmwarequalcomm : wcd9370_firmwarequalcomm : wcd9371_firmwarequalcomm : wcd9375_firmwarequalcomm : wcd9378_firmwarequalcomm : wcd9380_firmwarequalcomm : wcd9385_firmwarequalcomm : wcd9390_firmwarequalcomm : wcd9395_firmwarequalcomm : wcn3910_firmwarequalcomm : wcn3950_firmwarequalcomm : wcn3980_firmwarequalcomm : wcn3988_firmwarequalcomm : wcn6650_firmwarequalcomm : wcn6740_firmwarequalcomm : wcn6755_firmwarequalcomm : wcn7750_firmwarequalcomm : wcn7860_firmwarequalcomm : wcn7861_firmwarequalcomm : wcn7880_firmwarequalcomm : wcn7881_firmwarequalcomm : wsa8810_firmwarequalcomm : wsa8815_firmwarequalcomm : wsa8830_firmwarequalcomm : wsa8832_firmwarequalcomm : wsa8835_firmwarequalcomm : wsa8840_firmwarequalcomm : wsa8845_firmwarequalcomm : wsa8845h_firmware
AI-Powered Remediation
Generate remediation guidance or a C-suite brief for this vulnerability.