← Vulnerability feed

Vulnerability record · CVE-2026-25270 · published 6 October 2026

CVE-2026-25270: Qualcomm snapdragon g1 gen 2 gaming platform firmware out-of-bounds write vulnerability

Qualcomm · Snapdragon G1 Gen 2 Gaming Platform Firmware

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

6.7 CVSS 3.1 Medium EPSS 0.07% · top 99.9% CWE-787 · Out-of-bounds write
6.7CVSS 3.1 base score
0.07%EPSS exploitation probability, 30 days
NoNot in CISA KEV
150Affected product versions listed by NVD
1References
9 Oct 2026Last modified by NVD

Description

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

150 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html PatchVendor Advisory

Track CVE-2026-25270 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.6CVE-2026-25289Qualcomm sm7550p firmware stack-based buffer overflow vulnerabilityMemory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.EPSS 0.19%8.8CVE-2026-25283Qualcomm cologne firmware stack-based buffer overflow vulnerabilityMemory Corruption when copying unverified data from an external source exceeds the allocated buffer size.EPSS 0.07%8.8CVE-2026-25268Qualcomm wsa8835 firmware stack-based buffer overflow vulnerabilityMemory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.EPSS 0.11%7.9CVE-2026-25282Qualcomm cologne firmware out-of-bounds read vulnerabilityTransient DOS when processing unverified data from a neighboring system causes out of bound memory access.EPSS 0.06%7.8CVE-2026-57559Qualcomm cologne firmware use after free vulnerabilityMemory corruption while processing service requests.EPSS 0.07%7.8CVE-2026-57555Qualcomm cologne firmware use after free vulnerabilityMemory Corruption when executing system service routines due to improper handling of user input buffers.EPSS 0.07%7.8CVE-2026-57537Qualcomm congo firmware use after free vulnerabilityMemory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.EPSS 0.07%7.8CVE-2026-57545Qualcomm snapdragon g1 gen 2 gaming platform firmware vulnerabilityMemory corruption when processing draw objects of incorrect type during graphics command list execution.EPSS 0.08%

Source: NIST National Vulnerability Database (record CVE-2026-25270), CISA KEV, FIRST EPSS (scores of 2026-10-10). This page is refreshed as NVD updates the record.