Qualcomm Camera Driver Buffer Over-read Vulnerability Allowing Memory Corruption

A buffer over-read vulnerability has been identified in the Qualcomm camera driver, specifically within the camera-kernel component. This vulnerability arises from improper bounds checking during command handling, which can lead to memory corruption. The issue is present in various chipsets and platforms, including several Snapdragon mobile platforms and automotive chipsets.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to undefined behavior in the application, including potential arbitrary code execution or causing a system crash.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm May 2025 Security Bulletin.