Qualcomm Camera Driver Memory Corruption Vulnerability Due to Invalid IO Configuration

A memory corruption vulnerability has been identified in the Qualcomm Camera Driver. This issue arises during IO configuration processing when the IO port count is invalid. The vulnerability can lead to memory corruption, potentially allowing for unauthorized access or manipulation of memory.

Impact

Exploitation of this vulnerability can cause memory corruption, which may lead to arbitrary code execution or other unintended behavior by corrupting memory management, such as the heap or stack.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm May 2025 Security Bulletin.