CVE-2026-25273 (GCVE-0-2026-25273)

Vulnerability from cvelistv5 – Published: 2026-10-06 06:29 – Updated: 2026-10-06 12:26
VLAI
Title
Out-of-bounds Write in Camera Driver
Summary
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-06 12:26 UTC
CWE
Impacted products
Vendor Product Version
Qualcomm, Inc. Snapdragon Affected: FastConnect 6900
Affected: FastConnect 7800
Affected: Pandeiro
Affected: QCM8838
Affected: SD865 5G
Affected: SDR753
Affected: Snapdragon 8 Elite Gen 5
Affected: Snapdragon XR2 5G Platform
Affected: Snapdragon XR2+ Gen 1 Platform
Affected: WCD9380
Affected: WCD9395
Affected: WCN7860
Affected: WCN7861
Affected: WCN7880
Affected: WCN7881
Affected: WSA8810
Affected: WSA8815
Affected: WSA8840
Affected: WSA8845
Affected: WSA8845H
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25273",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-06T12:26:28.230789Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-06T12:26:38.612Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Snapdragon Auto",
            "Snapdragon Compute",
            "Snapdragon Mobile"
          ],
          "product": "Snapdragon",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "FastConnect 6900"
            },
            {
              "status": "affected",
              "version": "FastConnect 7800"
            },
            {
              "status": "affected",
              "version": "Pandeiro"
            },
            {
              "status": "affected",
              "version": "QCM8838"
            },
            {
              "status": "affected",
              "version": "SD865 5G"
            },
            {
              "status": "affected",
              "version": "SDR753"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8 Elite Gen 5"
            },
            {
              "status": "affected",
              "version": "Snapdragon XR2 5G Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon XR2+ Gen 1 Platform"
            },
            {
              "status": "affected",
              "version": "WCD9380"
            },
            {
              "status": "affected",
              "version": "WCD9395"
            },
            {
              "status": "affected",
              "version": "WCN7860"
            },
            {
              "status": "affected",
              "version": "WCN7861"
            },
            {
              "status": "affected",
              "version": "WCN7880"
            },
            {
              "status": "affected",
              "version": "WCN7881"
            },
            {
              "status": "affected",
              "version": "WSA8810"
            },
            {
              "status": "affected",
              "version": "WSA8815"
            },
            {
              "status": "affected",
              "version": "WSA8840"
            },
            {
              "status": "affected",
              "version": "WSA8845"
            },
            {
              "status": "affected",
              "version": "WSA8845H"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory Corruption when processing camera operations due to out-of-bounds write during driver updates."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T06:29:47.148Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html"
        }
      ],
      "title": "Out-of-bounds Write in Camera Driver"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2026-25273",
    "datePublished": "2026-10-06T06:29:47.148Z",
    "dateReserved": "2026-02-02T04:19:00.940Z",
    "dateUpdated": "2026-10-06T12:26:38.612Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-25273",
      "date": "2026-10-09",
      "epss": "0.00115",
      "percentile": "0.01419"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Snapdragon Auto",
                  "Snapdragon Compute",
                  "Snapdragon Mobile"
                ],
                "product": "Snapdragon",
                "vendor": "Qualcomm, Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "FastConnect 6900"
                  },
                  {
                    "status": "affected",
                    "version": "FastConnect 7800"
                  },
                  {
                    "status": "affected",
                    "version": "Pandeiro"
                  },
                  {
                    "status": "affected",
                    "version": "QCM8838"
                  },
                  {
                    "status": "affected",
                    "version": "SD865 5G"
                  },
                  {
                    "status": "affected",
                    "version": "SDR753"
                  },
                  {
                    "status": "affected",
                    "version": "Snapdragon 8 Elite Gen 5"
                  },
                  {
                    "status": "affected",
                    "version": "Snapdragon XR2 5G Platform"
                  },
                  {
                    "status": "affected",
                    "version": "Snapdragon XR2+ Gen 1 Platform"
                  },
                  {
                    "status": "affected",
                    "version": "WCD9380"
                  },
                  {
                    "status": "affected",
                    "version": "WCD9395"
                  },
                  {
                    "status": "affected",
                    "version": "WCN7860"
                  },
                  {
                    "status": "affected",
                    "version": "WCN7861"
                  },
                  {
                    "status": "affected",
                    "version": "WCN7880"
                  },
                  {
                    "status": "affected",
                    "version": "WCN7881"
                  },
                  {
                    "status": "affected",
                    "version": "WSA8810"
                  },
                  {
                    "status": "affected",
                    "version": "WSA8815"
                  },
                  {
                    "status": "affected",
                    "version": "WSA8840"
                  },
                  {
                    "status": "affected",
                    "version": "WSA8845"
                  },
                  {
                    "status": "affected",
                    "version": "WSA8845H"
                  }
                ]
              }
            ],
            "source": "product-security@qualcomm.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:congo_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4DA1D059-7672-40F5-BB2E-3072475666A0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:congo:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "48C84939-F83F-4E79-902C-32B77C4A4BBB",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:cq8845s_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4FB1D261-4C1B-4D43-B8ED-975E526A2FF5",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:cq8845s:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "54AC5C16-88A9-4C16-B7AF-835E53D7DFA4",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:cq8850ns_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "867A0C11-FBA0-46F1-871F-1800A7A75BB3",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:cq8850ns:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9885533F-4021-429D-917F-0A2733725B43",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CDE1CBDE-3D28-463C-B215-AA7DF373EF09",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:fastconnect_6200:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "66BD3B88-7CF9-482D-A2DD-67F6ACF4CC57",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E670F500-9B71-4BBE-B5DA-221D35803C89",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9ADEB5C5-B79A-4F45-B7D3-75945B38DB6C",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B3053D68-C5D8-4D47-A4F0-9F3AF2289E1D",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "638DBC7F-456F-487D-BED2-2214DFF8BEE2",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:orne_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "19FB8345-BBFC-4E18-A4E6-64A159D7F65B",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:orne:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FFDA4056-3F1B-4F3A-BE59-1908BD3DE5E9",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "23F8EF0C-BB48-47E1-A045-254D79388F75",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "058950FC-ED72-4E91-AE13-87E738ADC083",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:qmp1000_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5298473D-8B34-42E6-BC32-69A3800972B4",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:qmp1000:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2A1CF44E-FFC2-4DCB-8DC2-46422D912448",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:qmp2001_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0B53AF78-37B0-4D64-A7D3-1729D0248D61",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:qmp2001:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "560E36D2-27DB-4590-A879-C2071ED72641",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:fastconnect_8800_mobile_connectivity_system_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "28C65092-164F-40B7-8DCF-0F72F19C1CC3",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:fastconnect_8800_mobile_connectivity_system:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C3813BD8-2228-414D-BB2B-E3C00210404A",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:snapdragon_865_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6C9F4285-1F09-40CD-B1AA-84B406FD6A71",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:snapdragon_865_5g_mobile_platform:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8623DD44-DFDD-442D-9789-11A527A450A4",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:sm4875_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E21AC0DB-36FF-4B36-9CA9-809949B0CA53",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:sm4875:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "471434D6-35A1-4F4E-85C5-0180383BD315",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:sm6850_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DE09FF94-7751-4EED-B269-C7BB056CA90C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:sm6850:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "02B1463D-EE74-42DC-95D5-D0F66260CB32",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:sm8845p_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A205320E-6C60-4F6A-90D5-06CABAF0FDEA",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:sm8845p:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0FB8CE86-605E-4B3D-82E5-A55093ABCE5F",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:sm8950_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "09662E75-32BB-4D24-8A81-B743FF0DE323",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:sm8950:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8D44C02D-3FCA-4885-A1B5-7C2836B1233B",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:sm8950p_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9D5350DB-39BD-4BF4-87AB-5FD6DECB25D3",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:sm8950p:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0AE6E7D9-E7E8-490E-B801-D97F522CA0FA",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:sm8975_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "42D47A7D-A79C-4EA0-AEDF-533F4F9933B9",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:sm8975:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1CC31B0D-3890-442E-87BE-47E58A0F6537",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:sm8975p_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "73D04C5D-A3A8-45A3-A83E-03DF5EF400C2",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:sm8975p:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A67DF502-A50C-4E7E-B457-F46B7149B85C",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:snapdragon_460_mobile_platform_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "390D7CAF-6C0B-4438-AA7D-AEEE127F4D3C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:snapdragon_460_mobile_platform:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5BB1FC5E-CF6F-4E54-B78D-C01AFD034903",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:snapdragon_662_mobile_platform_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "37DF4D73-3ACC-41B3-8CA4-20DAECE6BFB7",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:snapdragon_662_mobile_platform:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FE08D23A-2D0D-4472-8847-27B955F55165",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:snapdragon_8_elite_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3EA50192-07B0-4404-93D4-EC4F3B1918B7",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:snapdragon_8_elite:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "26C7FC48-08CB-4E50-B8D3-8AF30549FDF8",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "41070BDB-15E4-4DD7-A132-A14AA24978E5",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:snapdragon_8_elite_gen_5:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "102460A6-9637-4883-9230-2CC888D5D74E",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:snapdragon_8_gen_5_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E4D8D8AD-B291-4AEC-8817-D7C99E79FF49",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:snapdragon_8_gen_5:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8CA08EA8-A47E-4797-8644-0A48D509939C",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1A129620-8241-4A47-AAC8-CC7E10A09C9C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:snapdragon_xr2_5g_platform:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4CEDD78E-124C-4216-9B57-3B7B53463659",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:snapdragon_xr2\\+_gen_1_platform_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BF9740EB-F82E-42EA-993E-A393B05CC6BB",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:snapdragon_xr2\\+_gen_1_platform:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "022A5532-03F7-4FB8-BA0D-4221178C9486",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1295D869-F4DD-4766-B4AA-3513752F43B4",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B98784DC-3143-4D38-AD28-DBBDCCAB4272",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "34143ABA-7D09-429F-A65C-3A33438BF62C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9D56DFE3-5EF1-4B23-BBD5-0203FBF9CCEC",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4CFDBB5B-0A4F-4032-874F-D2A7EF933FB0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcd9378:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D28A12D6-CC60-4BE9-ADEE-FAB58B05440F",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "70292B01-617F-44AD-AF77-1AFC1450523D",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FA94C6D6-85DB-4031-AAF4-C399019AE16D",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "699056F6-1517-4F25-AE07-4FFCF6923B9F",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E4C023D2-6FF5-4FFC-B9F2-895979166580",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3FEF2DB6-00F5-4B07-953B-EF58B31267F1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "120E8F0F-EBEB-4565-9927-2D473F783EF7",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E4BFB25F-013B-48E3-99FF-3E8687F94423",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BF676C5B-838B-446C-A689-6A25AB8A87E2",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcn6450_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1FAFC9FA-E6EF-44C5-BD50-2824C7711541",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcn6450:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6F895CDD-F9BB-45AD-AE60-71F4549114A4",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcn7760_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "506C6CE1-6BDF-4542-82C1-820D10D8181A",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcn7760:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "72F8CE3B-2BDC-40B1-BB04-A3A7E25B8096",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2EB8794F-7998-424E-AF68-E4A4F9310F65",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "799D69CE-3FCC-4B19-8B00-9AF38111D983",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "57608D47-894C-4895-B4B3-4733D55D57DB",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2FFD2C38-1A61-4BED-ABFA-DAE0C4B78620",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "63735D33-9F09-4841-9FE0-0D9AB604BECF",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E826F765-4C2E-4319-BBC4-DEB02AAD783F",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D765C392-5F38-4E6A-9E88-59629E7A6911",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FAE8F4F9-F692-4EC0-A3FE-2CDD681DCBFD",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcn8841_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C7A02129-BB8C-43F1-BFC1-3632BA299AB6",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcn8841:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4082B1D2-9CBD-48FE-93EF-C069A4B6A466",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "15307882-7039-43E9-9BA3-035045988B99",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AA85B322-E593-4499-829A-CC6D70BAE884",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E839A0B9-64C3-4C7A-82B7-D2AAF65928F8",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7E870D82-DE3B-4199-A730-C8FB545BAA98",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "11B69595-E488-4590-A150-CE5BE08B5E13",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7ACAD26E-B79E-4659-91A5-D301281F7D36",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F0E46DA6-9494-4D92-A4AE-A272AF6ACCCC",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F80BC68E-7476-4A40-9F48-53722FE9A5BF",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6B36F4B2-BAA3-45AD-9967-0EB482C99708",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CA33DE15-C177-43B3-AD50-FF797753D12E",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AE1A5841-5BCB-4033-ACB9-23F3FCA65309",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5B47BF35-3AA0-4667-842E-19B0FE30BF3C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8A071672-9405-4418-9141-35CEADBB65AF",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BB7CF473-8B25-4851-91F2-1BD693CCDC85",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "91E591F2-8F72-4A5A-9264-2742EB2DABDA",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8850_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FA243934-7BFA-47AA-B78C-CCB25377E471",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8850:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2FD65035-4D20-48D5-874E-47CD9C7A985C",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8850w_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "22707187-A56D-48AD-800F-A438FD844546",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8850w:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F526A54A-F974-4D0A-A1A6-FABBB6711CD0",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8855c_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "671E0B82-5D58-4644-8806-7F4CAFFB6641",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8855c:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CC066321-B3CC-4E88-BFA9-414B8D095207",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Memory Corruption when processing camera operations due to out-of-bounds write during driver updates."
          }
        ],
        "id": "CVE-2026-25273",
        "lastModified": "2026-10-09T14:11:13.757",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 0.8,
              "impactScore": 5.9,
              "source": "product-security@qualcomm.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-25273",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-06T12:26:28.230789Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-10-06T07:16:57.647",
        "references": [
          {
            "source": "product-security@qualcomm.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html"
          }
        ],
        "sourceIdentifier": "product-security@qualcomm.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-787"
              }
            ],
            "source": "product-security@qualcomm.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-25273",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-10-06T12:26:28.230789Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-06T12:26:33.031Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Snapdragon Auto",
                "Snapdragon Compute",
                "Snapdragon Mobile"
              ],
              "product": "Snapdragon",
              "vendor": "Qualcomm, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "FastConnect 6900"
                },
                {
                  "status": "affected",
                  "version": "FastConnect 7800"
                },
                {
                  "status": "affected",
                  "version": "Pandeiro"
                },
                {
                  "status": "affected",
                  "version": "QCM8838"
                },
                {
                  "status": "affected",
                  "version": "SD865 5G"
                },
                {
                  "status": "affected",
                  "version": "SDR753"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 8 Elite Gen 5"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon XR2 5G Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon XR2+ Gen 1 Platform"
                },
                {
                  "status": "affected",
                  "version": "WCD9380"
                },
                {
                  "status": "affected",
                  "version": "WCD9395"
                },
                {
                  "status": "affected",
                  "version": "WCN7860"
                },
                {
                  "status": "affected",
                  "version": "WCN7861"
                },
                {
                  "status": "affected",
                  "version": "WCN7880"
                },
                {
                  "status": "affected",
                  "version": "WCN7881"
                },
                {
                  "status": "affected",
                  "version": "WSA8810"
                },
                {
                  "status": "affected",
                  "version": "WSA8815"
                },
                {
                  "status": "affected",
                  "version": "WSA8840"
                },
                {
                  "status": "affected",
                  "version": "WSA8845"
                },
                {
                  "status": "affected",
                  "version": "WSA8845H"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Memory Corruption when processing camera operations due to out-of-bounds write during driver updates."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-787",
                  "description": "CWE-787: Out-of-bounds Write",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-10-06T06:29:47.148Z",
            "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
            "shortName": "qualcomm"
          },
          "references": [
            {
              "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html"
            }
          ],
          "title": "Out-of-bounds Write in Camera Driver"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "assignerShortName": "qualcomm",
        "cveId": "CVE-2026-25273",
        "datePublished": "2026-10-06T06:29:47.148Z",
        "dateReserved": "2026-02-02T04:19:00.940Z",
        "dateUpdated": "2026-10-06T12:26:38.612Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…