Qualcomm Camera Driver Out-of-bounds Write Vulnerability

A memory corruption vulnerability has been identified in the Qualcomm Camera Driver. This issue arises from an out-of-bounds write while processing schedule requests in the Camera Request Manager (CRM). The vulnerability is caused by an invalid link count in the corresponding session, which can lead to memory corruption.

Impact

Exploitation of this vulnerability causes memory corruption, which can potentially be exploited to execute arbitrary code or cause a denial-of-service condition.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm May 2025 Security Bulletin.