Qualcomm Camera Driver Improper Validation of Array Index Vulnerability

A memory corruption vulnerability has been identified in the camera driver of various chipsets due to improper validation of array indices. This issue arises when an unusually high number of nodes are passed to the AXI port, leading to memory corruption. The vulnerability is present in several chipsets, including those used in mobile platforms and automotive applications.

Impact

Exploitation of this vulnerability can lead to memory corruption, which may be exploited to execute arbitrary code or cause a denial-of-service condition.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm February 2025 Security Bulletin.