The vulnerability involves an out‑of‑bounds write performed by the Snapdragon camera driver when handling camera operations. This memory corruption can overwrite adjacent data structures, potentially allowing an attacker to alter control flow or inject malicious code. While the exact impact depends on system configuration, the flaw could enable privilege escalation or cause a system crash.

Qualcomm, Inc. Snapdragon products utilizing the camera driver are affected. No specific firmware or driver version ranges are provided, so all Snapdragon devices that include the unpatched camera driver should be considered impacted.

The CVSS score of 6.7 places it in the medium severity range. EPSS information is unavailable, and the vulnerability is not currently listed in CISA's KEV catalog. The likely attack vector is through camera operation requests originating from a compromised or malicious application; however, the description does not explicitly state whether remote or local exploitation is possible, so both scenarios are feasible under inference.