Primary

Context

Qualcomm Camera Buffer Over-read Vulnerability Allowing Memory Corruption

Vulnerability

A buffer over-read vulnerability has been identified in Qualcomm's camera component, affecting various chipsets. This vulnerability arises from processing auxiliary sensor input/output control commands without proper validation of buffer sizes, leading to memory corruption. The issue is present in several chipsets across different Qualcomm platforms, including mobile and automotive applications.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to arbitrary code execution or local privilege escalation, depending on the context.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and recommended that they deploy patches. Instructions for applying the patch can be found in the Qualcomm April 2026 Security Bulletin.

Added: Apr 6, 2026, 4:54 PM

Updated: Apr 6, 2026, 4:54 PM

Affected Products

Qualcomm AQT1000

Moderate fix1 remedy

cpe:2.3:h:qualcomm:aqt1000:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm FastConnect 6200

Moderate fix1 remedy

cpe:2.3:h:qualcomm:fastconnect_6200:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm FastConnect 6700

Moderate fix1 remedy

cpe:2.3:h:qualcomm:fastconnect_6700:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm FastConnect 6800

Moderate fix1 remedy

cpe:2.3:h:qualcomm:fastconnect_6800:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm FastConnect 6900

Moderate fix1 remedy

cpe:2.3:h:qualcomm:fastconnect_6900:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm FastConnect 7800

Moderate fix1 remedy

cpe:2.3:h:qualcomm:fastconnect_7800:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA0000

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca0000:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA6391

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6391:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA6420

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6420:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCA6430

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qca6430:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCM5430

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcm5430:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm QCM6490

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qcm6490:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm Video Collaboration VC3

Moderate fix1 remedy

cpe:2.3:h:qualcomm:qualcomm_video_collaboration_vc3:*:*:*:*:*:*:*, +3 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WCD9340

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wcd9340:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WCD9341

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wcd9341:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WCD9370

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wcd9370:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WCD9375

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wcd9375:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WCD9378C

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wcd9378:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WCD9380

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wcd9380:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WCD9385

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wcd9385:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WCN3950

Moderate fix1 remedy

cpe:2.3:o:qualcomm:wcn3950_firmware:*:*:*:*:*:*:*

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WCN3988

Moderate fix1 remedy

cpe:2.3:o:qualcomm:wcn3980_firmware:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WSA8810

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wsa8810:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WSA8815

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wsa8815:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WSA8830

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wsa8830:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WSA8832

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wsa8832:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WSA8835

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wsa8835:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WSA8840

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wsa8840:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WSA8845

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wsa8845:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm WSA8845H

Moderate fix1 remedy

cpe:2.3:h:qualcomm:wsa8845h:*:*:*:*:*:*:*, +1 more

Moderate fix1 remedy

>= 1.0, < 1.1

Qualcomm X2000077

0 remedies

Qualcomm X2000086

0 remedies

Qualcomm X2000090

0 remedies

Qualcomm X2000092

0 remedies

Qualcomm X2000094

0 remedies

Qualcomm XG101002

0 remedies

Qualcomm XG101032

0 remedies

Qualcomm XG101039

0 remedies

Qualcomm XRV7209

0 remedies

Qualcomm XRV9209

0 remedies

Vulnerability Rating

Custom Algorithm

spread

7.8

impact

1.3

exploitability

3.3

remediation

7.7

relevance

5.4

threat

0.0

urgency

2.9

incentive

0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.

Vulnerability Rating

Custom Algorithm

spread

7.8

impact

1.3

exploitability

3.3

remediation

7.7

relevance

5.4

threat

0.0

urgency

2.9

incentive

0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.