Qualcomm Camera Sensor Driver Buffer Over-read Vulnerability

A memory corruption vulnerability has been identified in a camera sensor driver for Qualcomm chipsets. The issue arises during IOCTL processing, where an output buffer is accessed without proper validation of its size. This lack of validation can lead to memory corruption, potentially allowing for arbitrary code execution or other malicious activities.

Impact

Exploitation of this vulnerability causes memory corruption, which can lead to arbitrary code execution or other malicious activities.

Remediation

Qualcomm has notified device manufacturers about this vulnerability and is actively sharing patches. For information on the patching status of released devices, contact the device manufacturer.