Qualcomm Snapdragon Products Memory Corruption Vulnerability in Camera Driver Allowing Sensor Utility Operations Manipulation

Vulnerability

A memory corruption vulnerability has been identified in various chipsets of Qualcomm Snapdragon products. This issue arises in the camera driver while handling sensor utility operations, creating a time-of-check time-of-use (TOCTOU) race condition. The vulnerability could potentially be exploited to cause unintended behavior in the application or system.

Impact

Exploitation of this vulnerability leads to memory corruption, which can cause a range of issues from application crashes to more severe consequences like arbitrary code execution, depending on the context in which the vulnerability is exploited.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the January 2026 Qualcomm Security Bulletin.

Added: Jan 7, 2026, 6:34 PM
Updated: Jan 7, 2026, 6:34 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
0.6
exploitability
2.8
remediation
0.0
relevance
1.9
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.