An out‑of‑bounds write occurs in the Qualcomm Snapdragon camera driver when it processes requests containing excessively large batch and I/O buffer configurations. The vulnerability can corrupt memory beyond the driver’s allocated region, potentially allowing an attacker to overwrite critical data structures or execute arbitrary code. This type of memory corruption is classified as CWE‑787 and can compromise the integrity of the device, possibly leading to privileged escalation or denial of service.

The flaw affects Qualcomm, Inc.’s Snapdragon family of processors, including all associated camera driver implementations. Specific affected versions are not listed in the advisory; thus, all Snapdragon platforms that use the affected camera driver with unbounded batch or I/O buffer handling should be considered susceptible until a vendor‑supplied fix is applied.

The CVSS score of 6.7 indicates moderate severity. No EPSS data is available, so the exploitation probability cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. The attack path is likely local, requiring an application or payload that can craft camera requests with oversized configurations. Although exploitation is not yet documented, the memory corruption could enable arbitrary code execution or compromise device stability, warranting prompt attention.