Qualcomm Camera Driver Improper Input Validation Vulnerability Allowing Memory Corruption

A vulnerability has been identified in the camera kernel driver of Qualcomm chipsets, allowing memory corruption through improper input validation. This issue arises when IOCTL calls are made from userspace to the camera driver, particularly to dump request information. The vulnerability is present in various chipsets and could potentially be exploited by manipulating the data sent via these IOCTL calls.

Impact

Exploitation of this vulnerability leads to memory corruption, which can cause undefined behavior in the application or system, such as crashing the device or creating opportunities for arbitrary code execution.

Reproduction

To reproduce this vulnerability, send an IOCTL request from userspace to the camera kernel driver. The request should include data that exceeds the expected length, bypassing the driver's input validation. This can be done by manipulating the IOCTL parameters to include excessive or malformed data.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm May 2025 Security Bulletin.