← Back to search

CVE-2026-25270

6.7 MEDIUM

Published 2026-10-06 · Updated 2026-10-09

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Vendors

qualcomm

Products

snapdragon g1 gen 2 gaming platform firmware, snapdragon g1 gen 2 gaming platform, cologne firmware, cologne, congo firmware, congo, cq2390m firmware, cq2390m, cq2390s firmware, cq2390s, sc8380xp firmware, sc8380xp

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.