Qualcomm Camera Buffer Over-Read Vulnerability in IOCTL Processing

A memory corruption vulnerability has been identified in Qualcomm camera drivers across various chipsets. This issue arises from accessing an output buffer without proper size validation during IOCTL processing, leading to a buffer over-read condition. The vulnerability is present in multiple chipsets, including those used in Snapdragon mobile platforms and other Qualcomm technologies.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to undefined behavior in the application, including potential arbitrary code execution or causing a device to become unresponsive.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and recommended that they deploy patches. Instructions for applying the patch can be found in the Qualcomm April 2026 Security Bulletin.