EUVD-2026-19331CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3Tags
Description
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
Analysis
Local privilege escalation in Qualcomm Snapdragon camera sensor drivers allows authenticated attackers with low privileges to execute arbitrary code with elevated permissions through unchecked output buffer access during IOCTL operations. This out-of-bounds read vulnerability (CWE-126) achieves complete system compromise (confidentiality, integrity, and availability impact all rated High in CVSS). …
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Identify all Snapdragon-based devices in your environment (smartphones, tablets, IoT devices, automotive systems) and document affected models and firmware versions. Within 7 days: Restrict local access privileges for standard users where feasible, enforce device enrollment in mobile device management (MDM) solutions with privilege management, and disable camera driver functionality on non-essential devices if operationally viable. …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today