Memory Corruption in Qualcomm Camera Sensor Driver
CVE-2026-21378

7.8HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
6 April 2026

What is CVE-2026-21378?

A memory corruption vulnerability has been identified in the Qualcomm Camera Sensor Driver, stemming from improper validation of output buffer sizes during IOCTL processing. This oversight could allow an attacker to execute arbitrary code or disrupt normal operation, potentially compromising the security of the affected device. It is essential for users to apply updates and patches provided by Qualcomm to mitigate this risk and safeguard their systems.

Affected Version(s)

Snapdragon Snapdragon Compute AQT1000

Snapdragon Snapdragon Compute Cologne

Snapdragon Snapdragon Compute FastConnect 6200

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.