Riskcovery

CVE-2025-59610

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

State
Published
Severity
6.4 Medium
Published
Jun 1, 2026
Updated
Jun 2, 2026
Reserved
Sep 18, 2025

Read the record on cve.org

Description

Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.

Scores

CVSSScoreVectorSource
3.16.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hqualcomm

Weaknesses

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

Affected Products

ProductVersions
SnapdragonQualcomm, Inc.
  • 5G Fixed Wireless Access PlatformAffected
  • C-V2X 9150Affected
  • CSRA6620Affected
  • CSRA6640Affected
  • CSRB31024Affected
  • FastConnect 6200Affected
  • FastConnect 6700Affected
  • FastConnect 6800Affected
  • FastConnect 6900Affected
  • FastConnect 7800Affected
  • Flight RB5 5G PlatformAffected
  • FSM100 PlatformAffected
  • G1 Gen 1Affected
  • G2 Gen 1Affected
  • IQ6 Series PlatformAffected
  • IQ8 Series PlatformAffected
  • IQ9 Series PlatformAffected
  • LeMans_AU_LGITAffected
  • LeMansAUAffected
  • MilosAffected
  • Monaco_IOTAffected
  • NetraniAffected
  • OrneAffected
  • Palawan25Affected
  • PandeiroAffected
  • and 180 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.