The flaw is an out-of-bounds write that occurs when the camera driver processes certain operations during a hardware update. It corrupts memory when buffer limits are not correctly enforced, which can lead to crashes or arbitrary code execution. The vulnerability is labeled CWE‑787, a classic buffer overflow issue that undermines memory integrity.

Qualcomm Snapdragon devices that incorporate the Snapdragon camera driver are affected. Specific firmware or kernel versions are not listed, so any Snapdragon platform with the camera driver subject to the described buffer handling risk could be impacted.

CVSS 6.7 signals medium severity, but the EPSS score is not available and the vulnerability is not listed in CISA KEV, so exploitation probability is unclear. The likely attack vector appears to be local or device-bound, triggered by sending specially crafted camera commands, though confirmation requires further vendor details.