CVE-2026-25263Medium· 6.6▾ SunlitMemory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 36.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.09%
Last analysed / modified upstream
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
snapdragon_g1_gen_2_gaming_platform_firmware5g_fixed_wireless_access_platform_firmware9205_lte_modem_firmware9205s_modem_firmwareaqt1000_firmwaresnapdragon_8c_compute_platform_(sc8180xp-ad)_firmwaresnapdragon_8cx_compute_platform_firmwaresnapdragon_8cx_compute_platform_"poipu_pro"_firmwaresnapdragon_8cx_gen_2_5g_compute_platform_firmwaresnapdragon_8cx_gen_2_5g_compute_platform_"poipu_pro"_firmwaresnapdragon_auto_5g_modem-rf_firmwaresnapdragon_wear_1300_platform_firmwaresnapdragon_x53_5g_modem-rf_system_firmwaresnapdragon_x55_5g_modem-rf_system_firmwaresnapdragon_xr2_5g_platform_firmwaresnapdragon_xr2+_gen_1_platform_firmwaresnapdragon_auto_4g_modem_firmwarevision_intelligence_400_platform_firmwarewcd9306_firmwarewcd9335_firmwarewcd9340_firmwarewcd9341_firmwarewcd9360_firmwarewcd9370_firmwarewcd9371_firmwarewcd9375_firmwarewcd9378_firmwarewcd9380_firmwarewcd9385_firmwarewcd9390_firmwarewcd9395_firmwarewcn3910_firmwarewcn3950_firmwarewcn3980_firmwarewcn3988_firmwarewcn3990_firmwarewcn6650_firmwarewcn6755_firmwarewsa8810_firmwarewsa8815_firmwarewsa8830_firmwarewsa8832_firmwarewsa8835_firmwarewsa8840_firmwarewsa8845_firmwarear8031_firmwarec-v2x_9150_firmwarecsra6620_firmwarecsra6640_firmwarecsrb31024_firmwarefastconnect_6200_firmwarefastconnect_6700_firmwarefastconnect_6800_firmwarefastconnect_6900_firmwarefastconnect_7800_firmwareflight_rb5_5g_platform_firmwarefsm100_platform_firmwareg1_gen_1_firmwareg2_gen_1_firmwareg3x_gen_2_firmwareiq-615_firmwareiq-8275_firmwareiq-9075_firmwareiqx5121_firmwareiqx7181_firmwarembm415_firmwaremonaco_iot_firmwarenetrani_firmwareqca0000_firmwareqca2066_firmwareqca4004_firmwareqca6391_firmwareqca6420_firmwareqca6430_firmwareqca6564_firmwareqca6564a_firmwareqca6564au_firmwareqca6574_firmwareqca6574a_firmwareqca6574au_firmwareqca6595_firmwareqca6595au_firmwareqca6688aq_firmwareqca6696_firmwareqca6698aq_firmwarewsa8845h_firmwareqca6698au_firmwareqca6797aq_firmwareqcc710_firmwareqcm2290_firmwareqcm4290_firmwareqcm4325_firmwareqcm4490_firmwareqcm5430_firmwareqcm6125_firmwareqcm6490_firmwareqcn9011_firmwareqcn9012_firmwareqcs2290_firmwareqcs4290_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-25270Medium· 6.7Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
CVE-2026-25272Medium· 6.7Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
CVE-2026-25269Medium· 6.7Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
CVE-2026-57554High· 7.8Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
CVE-2026-57545High· 7.8Memory corruption when processing draw objects of incorrect type during graphics command list execution.
CVE-2026-25273Medium· 6.7Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.