Qualcomm Camera Driver Use-After-Free Vulnerability Allowing Memory Corruption

A use-after-free vulnerability has been identified in the Qualcomm Camera Driver, affecting various chipsets. This vulnerability arises from concurrent buffer access, where the reference count is not properly managed, leading to memory corruption. The issue can be exploited by manipulating the reference count during simultaneous access to buffers, causing the system to reference freed memory, which can be exploited to execute arbitrary code or cause a denial-of-service condition.

Impact

Exploitation of this vulnerability can lead to memory corruption, with potential consequences such as arbitrary code execution or causing the device to become unresponsive.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm May 2025 Security Bulletin.