Описание
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
Затрагиваемое ПО
Qualcomm Aqt1000 firmwareQualcomm Aqt1000Qualcomm Cologne firmwareQualcomm CologneQualcomm Fastconnect 6200 firmwareQualcomm Fastconnect 6200Qualcomm Fastconnect 6700 firmwareQualcomm Fastconnect 6700Qualcomm Fastconnect 6800 firmwareQualcomm Fastconnect 6800Qualcomm Fastconnect 6900 firmwareQualcomm Fastconnect 6900Qualcomm Wcd9341 firmwareQualcomm Wcd9341Qualcomm Wcd9370 firmwareQualcomm Wcd9370Qualcomm Wcd9375 firmwareQualcomm Wcd9375Qualcomm Wcd9378c firmwareQualcomm Wcd9378cQualcomm Wcd9380 firmwareQualcomm Wcd9380Qualcomm Wcd9385 firmwareQualcomm Wcd9385Qualcomm Wcn3950 firmware
CVSS
| Балл | 7.8 — высокая |
| Вектор | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Источники
https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html