CVE-2026-25273CWE-787

CVE-2026-25273

Medium · published October 6, 2026

CVSS v3.1
6.7
EPSS
0%
Percentile
0.1
In the wild
Unconfirmed
What it is

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00073 · 0.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-10-06T11:16Z
Affected products (51)
ProductVersionsFixed in
qualcomm/congo_firmwareall versions—
qualcomm/cq8845s_firmwareall versions—
qualcomm/cq8850ns_firmwareall versions—
qualcomm/fastconnect_6200_firmwareall versions—
qualcomm/fastconnect_6900_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/orne_firmwareall versions—
qualcomm/pandeiro_firmwareall versions—
qualcomm/qmp1000_firmwareall versions—
qualcomm/qmp2001_firmwareall versions—
qualcomm/fastconnect_8800_mobile_connectivity_system_firmwareall versions—
qualcomm/snapdragon_865_5g_mobile_platform_firmwareall versions—
qualcomm/sm4875_firmwareall versions—
qualcomm/sm6850_firmwareall versions—
qualcomm/sm8845p_firmwareall versions—
qualcomm/sm8950_firmwareall versions—
qualcomm/sm8950p_firmwareall versions—
qualcomm/sm8975_firmwareall versions—
qualcomm/sm8975p_firmwareall versions—
qualcomm/snapdragon_460_mobile_platform_firmwareall versions—
qualcomm/snapdragon_662_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8_elite_firmwareall versions—
qualcomm/snapdragon_8_elite_gen_5_firmwareall versions—
qualcomm/snapdragon_8_gen_5_firmwareall versions—
qualcomm/snapdragon_xr2_5g_platform_firmwareall versions—
qualcomm/snapdragon_xr2\+_gen_1_platform_firmwareall versions—
qualcomm/wcd9370_firmwareall versions—
qualcomm/wcd9375_firmwareall versions—
qualcomm/wcd9378_firmwareall versions—
qualcomm/wcd9380_firmwareall versions—
qualcomm/wcd9395_firmwareall versions—
qualcomm/wcn3950_firmwareall versions—
qualcomm/wcn3988_firmwareall versions—
qualcomm/wcn6450_firmwareall versions—
qualcomm/wcn7760_firmwareall versions—
qualcomm/wcn7860_firmwareall versions—
qualcomm/wcn7861_firmwareall versions—
qualcomm/wcn7880_firmwareall versions—
qualcomm/wcn7881_firmwareall versions—
qualcomm/wcn8841_firmwareall versions—
qualcomm/wsa8810_firmwareall versions—
qualcomm/wsa8815_firmwareall versions—
qualcomm/wsa8830_firmwareall versions—
qualcomm/wsa8832_firmwareall versions—
qualcomm/wsa8835_firmwareall versions—
qualcomm/wsa8840_firmwareall versions—
qualcomm/wsa8845_firmwareall versions—
qualcomm/wsa8845h_firmwareall versions—
qualcomm/wsa8850_firmwareall versions—
qualcomm/wsa8850w_firmwareall versions—
qualcomm/wsa8855c_firmwareall versions—
References (1)
https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html · [email protected]
EPSS history
Timeline
  • 07 OCT 03:40Z
    EPSS moved — → 0%
    epss
  • 06 OCT 06:29Z
    Out-of-bounds Write in Camera Driver
    cvelistv5