A kernel‑mode out of bounds write occurs when a user‑space program sends a malformed IOCTL command to the Linux camera driver. The memory corruption can lead to unreliable driver behavior, data corruption, or potentially allow a local attacker to gain elevated privileges. The flaw is a classic out‑of‑bounds write (CWE‑787).

Qualcomm Snapdragon devices are affected. No specific product or version details were provided in the CNAs. The vulnerability applies to the camera driver that handles IOCTL requests on Snapdragon chipsets.

The CVSS score of 6.6 places the vulnerability in the medium severity range. The EPSS score is not available and the issue is not listed in the CISA KEV catalog. The likely attack vector is local: a malicious or compromised user‑space process that can issue privileged IOCTLs to the camera driver can trigger the bug. Successful exploitation could lead to escalation of privileges to the kernel or cause system instability. The absence of an EPSS score makes the exact exploitation probability uncertain, but the medium CVSS indicates that the flaw is significant enough to warrant timely remediation.