CVE-2026-25270
Medium
Description
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
SeverityMedium
CVSS6.7
Exploit probability—
Product
Qualcomm Snapdragon G1 Gen 2 Gaming Platform Firmware
PublishedOct 6, 2026
First seenOct 6, 2026
Weakness typeCWE-787Out-of-bounds write
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm snapdragon_g1_gen_2_gaming_platform_firmware | No range specified | — |
| qualcomm cologne_firmware | No range specified | — |
| qualcomm congo_firmware | No range specified | — |
| qualcomm cq2390m_firmware | No range specified | — |
| qualcomm cq2390s_firmware | No range specified | — |
| qualcomm sc8380xp_firmware | No range specified | — |
| qualcomm snapdragon_8_gen1_5g_firmware | No range specified | — |
| qualcomm snapdragon_662_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_865_5g_mobile_platform_firmware | No range specified | — |
| qualcomm sdr753_firmware | No range specified | — |
| qualcomm sm4850_firmware | No range specified | — |
| qualcomm sm4850p_firmware | No range specified | — |
| qualcomm sm4875_firmware | No range specified | — |
| qualcomm sm6225p_firmware | No range specified | — |
| qualcomm sm6450p_firmware | No range specified | — |
| qualcomm sm6475p_firmware | No range specified | — |
| qualcomm sm6475q_firmware | No range specified | — |
| qualcomm sm6650p_firmware | No range specified | — |
| qualcomm sm6850_firmware | No range specified | — |
| qualcomm sm7325p_firmware | No range specified | — |
| qualcomm sm7435_firmware | No range specified | — |
| qualcomm sm7435p_firmware | No range specified | — |
| qualcomm sm7525_firmware | No range specified | — |
| qualcomm sm7550_firmware | No range specified | — |
| qualcomm sm7550p_firmware | No range specified | — |
| qualcomm sm7635p_firmware | No range specified | — |
| qualcomm sm7675_firmware | No range specified | — |
| qualcomm sm7675p_firmware | No range specified | — |
| qualcomm sm7750p_firmware | No range specified | — |
| qualcomm sm8475p_firmware | No range specified | — |
| qualcomm sm8550p_firmware | No range specified | — |
| qualcomm sm8635_firmware | No range specified | — |
| qualcomm sm8635p_firmware | No range specified | — |
| qualcomm sm8650q_firmware | No range specified | — |
| qualcomm sm8735p_firmware | No range specified | — |
| qualcomm sm8750p_firmware | No range specified | — |
| qualcomm sm8845p_firmware | No range specified | — |
| qualcomm sm8950_firmware | No range specified | — |
| qualcomm sm8950p_firmware | No range specified | — |
| qualcomm sm8975_firmware | No range specified | — |
| qualcomm sm8975p_firmware | No range specified | — |
| qualcomm smart_audio_400_platform_firmware | No range specified | — |
| qualcomm snapdragon_4_gen_1_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_4_gen_2_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_460_mobile_platform_firmware | No range specified | — |
| qualcomm cq7790_firmware | No range specified | — |
| qualcomm cq8725s_firmware | No range specified | — |
| qualcomm cq8750m_firmware | No range specified | — |
| qualcomm cq8845s_firmware | No range specified | — |
| qualcomm cq8850ns_firmware | No range specified | — |
| qualcomm csra6620_firmware | No range specified | — |
| qualcomm csra6640_firmware | No range specified | — |
| qualcomm fastconnect_6200_firmware | No range specified | — |
| qualcomm fastconnect_6700_firmware | No range specified | — |
| qualcomm fastconnect_6900_firmware | No range specified | — |
| qualcomm fastconnect_7800_firmware | No range specified | — |
| qualcomm g1_gen_1_firmware | No range specified | — |
| qualcomm g2_gen_1_firmware | No range specified | — |
| qualcomm g3x_gen_2_firmware | No range specified | — |
| qualcomm iq-615_firmware | No range specified | — |
| qualcomm iq-8275_firmware | No range specified | — |
| qualcomm iq-9075_firmware | No range specified | — |
| qualcomm kalpeni_firmware | No range specified | — |
| qualcomm lemans_au_lgit_firmware | No range specified | — |
| qualcomm lemansau_firmware | No range specified | — |
| qualcomm mbm415_firmware | No range specified | — |
| qualcomm mbm715_firmware | No range specified | — |
| qualcomm milos_firmware | No range specified | — |
| qualcomm milos_iot_firmware | No range specified | — |
| qualcomm monaco_iot_firmware | No range specified | — |
| qualcomm netrani_firmware | No range specified | — |
| qualcomm orne_firmware | No range specified | — |
| qualcomm palawan25_firmware | No range specified | — |
| qualcomm pandeiro_firmware | No range specified | — |
| qualcomm q-4390_firmware | No range specified | — |
| qualcomm qam8255p_firmware | No range specified | — |
| qualcomm qamsrv1h_firmware | No range specified | — |
| qualcomm qamsrv1m_firmware | No range specified | — |
| qualcomm qca6391_firmware | No range specified | — |
| qualcomm qca6595au_firmware | No range specified | — |
| qualcomm qca6678aq_firmware | No range specified | — |
| qualcomm qca6698aq_firmware | No range specified | — |
| qualcomm qca6698au_firmware | No range specified | — |
| qualcomm qca6797aq_firmware | No range specified | — |
| qualcomm qca8695au_firmware | No range specified | — |
| qualcomm sxr2250p_firmware | No range specified | — |
| qualcomm themisto_firmware | No range specified | — |
| qualcomm wcd9335_firmware | No range specified | — |
| qualcomm wcd9370_firmware | No range specified | — |
| qualcomm wcd9371_firmware | No range specified | — |
| qualcomm wcd9375_firmware | No range specified | — |
| qualcomm wcd9378_firmware | No range specified | — |
| qualcomm wcd9380_firmware | No range specified | — |
| qualcomm wcd9385_firmware | No range specified | — |
| qualcomm wcd9390_firmware | No range specified | — |
| qualcomm wcd9395_firmware | No range specified | — |
| qualcomm wcn3910_firmware | No range specified | — |
| qualcomm wcn3950_firmware | No range specified | — |
| qualcomm wcn3980_firmware | No range specified | — |
| qualcomm wcn3988_firmware | No range specified | — |
| qualcomm wcn6450_firmware | No range specified | — |
| qualcomm wcn6650_firmware | No range specified | — |
| qualcomm wcn6755_firmware | No range specified | — |
| qualcomm wcn7760_firmware | No range specified | — |
| qualcomm wcn7860_firmware | No range specified | — |
| qualcomm wcn7861_firmware | No range specified | — |
| qualcomm wcn7880_firmware | No range specified | — |
| qualcomm wcn7881_firmware | No range specified | — |
| qualcomm wcn8841_firmware | No range specified | — |
| qualcomm wsa8810_firmware | No range specified | — |
| qualcomm wsa8815_firmware | No range specified | — |
| qualcomm wsa8830_firmware | No range specified | — |
| qualcomm wsa8832_firmware | No range specified | — |
| qualcomm wsa8835_firmware | No range specified | — |
| qualcomm wsa8840_firmware | No range specified | — |
| qualcomm wsa8845_firmware | No range specified | — |
| qualcomm wsa8845h_firmware | No range specified | — |
| qualcomm wsa8850_firmware | No range specified | — |
| qualcomm wsa8850w_firmware | No range specified | — |
| qualcomm wsa8855c_firmware | No range specified | — |
| qualcomm x1e80100_firmware | No range specified | — |
| qualcomm xrv7209_firmware | No range specified | — |
| qualcomm xrv9209_firmware | No range specified | — |
| qualcomm qcm2290_firmware | No range specified | — |
| qualcomm qcm4290_firmware | No range specified | — |
| qualcomm qcm4325_firmware | No range specified | — |
| qualcomm qcm4490_firmware | No range specified | — |
| qualcomm qcm5430_firmware | No range specified | — |
| qualcomm qcm6490_firmware | No range specified | — |
| qualcomm qcm8838_firmware | No range specified | — |
| qualcomm qcn9011_firmware | No range specified | — |
| qualcomm qcn9012_firmware | No range specified | — |
| qualcomm qcs2290_firmware | No range specified | — |
| qualcomm qcs4290_firmware | No range specified | — |
| qualcomm qcs4490_firmware | No range specified | — |
| qualcomm qcs6690_firmware | No range specified | — |
| qualcomm qcs8550_firmware | No range specified | — |
| qualcomm qln1083bd_firmware | No range specified | — |
| qualcomm qln1086bd_firmware | No range specified | — |
| qualcomm qmp1000_firmware | No range specified | — |
| qualcomm qmp2001_firmware | No range specified | — |
| qualcomm qna715_firmware | No range specified | — |
| qualcomm qpa1083bd_firmware | No range specified | — |
| qualcomm qpa1086bd_firmware | No range specified | — |
| qualcomm fastconnect_8800_mobile_connectivity_system_firmware | No range specified | — |
| qualcomm video_collaboration_vc1_platform_firmware | No range specified | — |
| qualcomm video_collaboration_vc3_platform_firmware | No range specified | — |
| qualcomm video_collaboration_vc5_platform_firmware | No range specified | — |
| qualcomm qxm1083_firmware | No range specified | — |
| qualcomm qxm1086_firmware | No range specified | — |
| qualcomm qxm1093_firmware | No range specified | — |
| qualcomm qxm1094_firmware | No range specified | — |
| qualcomm qxm1095_firmware | No range specified | — |
| qualcomm qxm1096_firmware | No range specified | — |
| qualcomm robotics_rb2_platform_firmware | No range specified | — |
| qualcomm sa7255p_firmware | No range specified | — |
| qualcomm sa7775p_firmware | No range specified | — |
| qualcomm sa8255p_firmware | No range specified | — |
| qualcomm sa8620p_firmware | No range specified | — |
| qualcomm sa8770p_firmware | No range specified | — |
| qualcomm sa9000p_firmware | No range specified | — |
| qualcomm sar1165p_firmware | No range specified | — |
| qualcomm sar2130p_firmware | No range specified | — |
| qualcomm snapdragon_480_5g_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_480\+_5g_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_6_gen_1_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_6_gen_3_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_6_gen_4_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_680_4g_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_685_4g_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_695_5g_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_7_gen_1_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_7_gen_4_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_7\+_gen_2_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_778g_5g_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_778g\+_5g_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_782g_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_7c\+_gen_3_compute_firmware | No range specified | — |
| qualcomm snapdragon_7s_gen_3_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_8_elite_firmware | No range specified | — |
| qualcomm snapdragon_8_elite_gen_5_firmware | No range specified | — |
| qualcomm snapdragon_8_gen_1_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_8_gen_2_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_8_gen_3_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_8_gen_5_firmware | No range specified | — |
| qualcomm snapdragon_8\+_gen_1_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_8\+_gen_2_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_888_5g_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_888\+_5g_mobile_platform_firmware | No range specified | — |
| qualcomm snapdragon_ar1_gen_1_platform_firmware | No range specified | — |
| qualcomm snapdragon_ar1\+_gen_1_platform_firmware | No range specified | — |
| qualcomm snapdragon_ride_elite_firmware | No range specified | — |
| qualcomm snapdragon_x53_5g_modem-rf_system_firmware | No range specified | — |
| qualcomm snapdragon_xr2_5g_platform_firmware | No range specified | — |
| qualcomm snapdragon_xr2\+_gen_1_platform_firmware | No range specified | — |
| qualcomm snapdragon_cockpit_elite_firmware | No range specified | — |
| qualcomm snapdragon_reality_elite_platform_firmware | No range specified | — |
| qualcomm snapdragon_wear_elite_platform_firmware | No range specified | — |
| qualcomm srv1h_firmware | No range specified | — |
| qualcomm srv1m_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.