Snapdragon vulnerability

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

Published 7 Jan 2026Updated 7 Oct 20261 sources
CVSS 6.7

What happened

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

Affected versions

Snapdragon: CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; QAM8255P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6391; QCA6595; QCA6595AU; QCA6678AQ; QCA6698AQ; QCA6698AU; QCA6797AQ; QCM2290; QCM4490; QCM5430; QCM6490; QCM8550; QCN9011; QCN9012; QCS2290; QCS410; QCS4490; QCS5430; QCS610; QCS615; QCS6490; QCS7230; QCS8250; QCS8550; QCS9100; QMP1000; QRB5165M; QRB5165N; Qualcommr Video Collaboration VC1 Platform; Qualcommr Video Collaboration VC3 Platform; Qualcommr Video Collaboration VC5 Platform; Robotics RB2 Platform; Robotics RB5 Platform; SA7255P; SA7775P; SA8255P; SA8620P; SA8650P; SA8770P; SA8775P; SA9000P; SD 8 Gen1 5G; SG4150P; SG8275; SG8275P; SM4635; SM6225P; SM6475; SM6650; SM6650P; SM7325P; SM7435; SM7550; SM7550P; SM7635; SM7635P; SM7675; SM7675P; SM8475P; SM8550P; SM8635; SM8635P; SM8650Q; SM8735; SM8750; SM8750P; Smart Audio 400 Platform; Snapdragon 4 Gen 1 Mobile Platform; Snapdragon 4 Gen 2 Mobile Platform; Snapdragon 460 Mobile Platform; Snapdragon 480 5G Mobile Platform; Snapdragon 480+ 5G Mobile Platform (SM4350-AC); Snapdragon 6 Gen 1 Mobile Platform; Snapdragon 662 Mobile Platform; Snapdragon 680 4G Mobile Platform; Snapdragon 685 4G Mobile Platform (SM6225-AD); Snapdragon 695 5G Mobile Platform; Snapdragon 7 Gen 1 Mobile Platform; Snapdragon 7+ Gen 2 Mobile Platform; Snapdragon 778G 5G Mobile Platform; Snapdragon 778G+ 5G Mobile Platform (SM7325-AE); Snapdragon 782G Mobile Platform (SM7325-AF); Snapdragon 7c+ Gen 3 Compute; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8 Gen 3 Mobile Platform; Snapdragon 8+ Gen 1 Mobile Platform; Snapdragon 8+ Gen 2 Mobile Platform; Snapdragon 888 5G Mobile Platform; Snapdragon 888+ 5G Mobile Platform (SM8350-AC); Snapdragon AR1 Gen 1 Platform; Snapdragon AR1 Gen 1 Platform "Luna1"; Snapdragon AR2 Gen 1 Platform; Snapdragon W5+ Gen 1 Wearable Platform; SRV1H; SRV1M; SSG2115P; SSG2125P; SW5100; SW5100P; SXR1230P; SXR2230P; SXR2250P; SXR2330P; SXR2350P; WCD9335; WCD9370; WCD9371; WCD9375; WCD9378; WCD9380; WCD9385; WCD9390; WCD9395; WCN3910; WCN3950; WCN3980; WCN3988; WCN6650; WCN6740; WCN6755; WCN7750; WCN7860; WCN7861; WCN7880; WCN7881; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845; WSA8845H Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

  • Apply vendor-provided updates or mitigations.
  • Review affected product exposure and access logs.

Public PoC references

No public PoC reference has passed the current publication threshold.