Qualcomm Camera Sensor Driver Buffer Over-read Vulnerability Allowing Memory Corruption

A buffer over-read vulnerability has been identified in a camera sensor driver for Qualcomm chipsets. This vulnerability arises from memory corruption when the driver accesses an output buffer without properly validating its size during IOCTL processing. The issue affects several chipsets and could lead to memory corruption, potentially allowing for further exploitation.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to undefined behavior in the application, including potential arbitrary code execution or causing a device to crash.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and is actively sharing patches. For information on the patching status of released devices, contact the device manufacturer.