{"id":"CVE-2026-25270","published":"2026-10-06T07:16:57.367","lastModified":"2026-10-09T14:10:57.477","description":"Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.","cvssScore":6.7,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-787"],"vendors":["qualcomm"],"products":["snapdragon g1 gen 2 gaming platform firmware","snapdragon g1 gen 2 gaming platform","cologne firmware","cologne","congo firmware","congo","cq2390m firmware","cq2390m","cq2390s firmware","cq2390s","sc8380xp firmware","sc8380xp"],"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":null}