Memory Corruption Vulnerability in Qualcomm Camera Kernel Driver
CVE-2025-27037

7.8HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
24 September 2025

What is CVE-2025-27037?

This vulnerability involves memory corruption that occurs during the processing of config_dev IOCTL in Qualcomm's camera kernel driver. The issue arises when the driver improperly manages CPU buffer references, potentially leading to system instability or compromised integrity of applications utilizing the camera.

Affected Version(s)

Snapdragon Snapdragon Auto FastConnect 6800

Snapdragon Snapdragon Auto FastConnect 6900

Snapdragon Snapdragon Auto FastConnect 7800

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.