Qualcomm Camera Driver Untrusted Pointer Dereference Vulnerability Allowing Memory Corruption

A vulnerability has been identified in the camera driver of various chipsets, including those used in mobile platforms and automotive applications. This vulnerability involves an untrusted pointer dereference, which can lead to memory corruption. The issue arises while preprocessing Input/Output Control (IOCTL) commands in sensors, potentially allowing for unauthorized manipulation of memory and disruption of normal device operations.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to undefined behavior in the application, including potential information disclosure or arbitrary code execution.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the January 2026 Qualcomm Security Bulletin.