{"id":59054,"date":"2026-06-01T19:06:45","date_gmt":"2026-06-01T19:06:45","guid":{"rendered":"https:\/\/zero.redgem.net\/?p=59054"},"modified":"2026-06-01T19:06:45","modified_gmt":"2026-06-01T19:06:45","slug":"time-of-check-time-of-use-toctou-race-condition-in-camera-driver","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=59054","title":{"rendered":"Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver_CVE-2025-59610"},"content":{"rendered":"<p>{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.&#8221;,&#8221;published&#8221;:&#8221;2026-06-01T22:05:29.149Z&#8221;,&#8221;modified&#8221;:&#8221;2026-06-01T22:05:29.149Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/june-2026-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-59610&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-367&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc. Snapdragon 5G Fixed Wireless Access Platform\\nQualcomm, Inc. Snapdragon C-V2X 9150\\nQualcomm, Inc. Snapdragon CSRA6620\\nQualcomm, Inc. Snapdragon CSRA6640\\nQualcomm, Inc. Snapdragon CSRB31024\\nQualcomm, Inc. Snapdragon FastConnect 6200\\nQualcomm, Inc. Snapdragon FastConnect 6700\\nQualcomm, Inc. Snapdragon FastConnect 6800\\nQualcomm, Inc. Snapdragon FastConnect 6900\\nQualcomm, Inc. Snapdragon FastConnect 7800\\nQualcomm, Inc. Snapdragon Flight RB5 5G Platform\\nQualcomm, Inc. Snapdragon FSM100 Platform\\nQualcomm, Inc. Snapdragon G1 Gen 1\\nQualcomm, Inc. Snapdragon G2 Gen 1\\nQualcomm, Inc. Snapdragon IQ6 Series Platform\\nQualcomm, Inc. Snapdragon IQ8 Series Platform\\nQualcomm, Inc. Snapdragon IQ9 Series Platform\\nQualcomm, Inc. Snapdragon LeMans_AU_LGIT\\nQualcomm, Inc. Snapdragon LeMansAU\\nQualcomm, Inc. Snapdragon Milos\\nQualcomm, Inc. Snapdragon Monaco_IOT\\nQualcomm, Inc. Snapdragon Netrani\\nQualcomm, Inc. Snapdragon Orne\\nQualcomm, Inc. Snapdragon Palawan25\\nQualcomm, Inc. Snapdragon Pandeiro\\nQualcomm, Inc. Snapdragon QAM8255P\\nQualcomm, Inc. Snapdragon QAM8295P\\nQualcomm, Inc. Snapdragon QAMSRV1H\\nQualcomm, Inc. Snapdragon QAMSRV1M\\nQualcomm, Inc. Snapdragon QCA6391\\nQualcomm, Inc. Snapdragon QCA6564AU\\nQualcomm, Inc. Snapdragon QCA6574\\nQualcomm, Inc. Snapdragon QCA6574A\\nQualcomm, Inc. Snapdragon QCA6574AU\\nQualcomm, Inc. Snapdragon QCA6595\\nQualcomm, Inc. Snapdragon QCA6595AU\\nQualcomm, Inc. Snapdragon QCA6678AQ\\nQualcomm, Inc. Snapdragon QCA6688AQ\\nQualcomm, Inc. Snapdragon QCA6696\\nQualcomm, Inc. Snapdragon QCA6698AQ\\nQualcomm, Inc. Snapdragon QCA6698AU\\nQualcomm, Inc. Snapdragon QCA6797AQ\\nQualcomm, Inc. Snapdragon QCA8695AU\\nQualcomm, Inc. Snapdragon QCM2290\\nQualcomm, Inc. Snapdragon QCM4325\\nQualcomm, Inc. Snapdragon QCM4490\\nQualcomm, Inc. Snapdragon QCM5430\\nQualcomm, Inc. Snapdragon QCM6490\\nQualcomm, Inc. Snapdragon QCN9011\\nQualcomm, Inc. Snapdragon QCN9012\\nQualcomm, Inc. Snapdragon QCS2290\\nQualcomm, Inc. Snapdragon QCS410\\nQualcomm, Inc. Snapdragon QCS4290\\nQualcomm, Inc. Snapdragon QCS4490\\nQualcomm, Inc. Snapdragon QCS8550\\nQualcomm, Inc. Snapdragon QLN1083BD\\nQualcomm, Inc. Snapdragon QLN1086BD\\nQualcomm, Inc. Snapdragon QMP1000\\nQualcomm, Inc. Snapdragon QPA1083BD\\nQualcomm, Inc. Snapdragon QPA1086BD\\nQualcomm, Inc. Snapdragon QRB5165M\\nQualcomm, Inc. Snapdragon QRB5165N\\nQualcomm, Inc. Snapdragon Qualcomm 215 Mobile Platform\\nQualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC1 Platform\\nQualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC3 Platform\\nQualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC5 Platform\\nQualcomm, Inc. Snapdragon QXM1093\\nQualcomm, Inc. Snapdragon QXM1094\\nQualcomm, Inc. Snapdragon QXM1095\\nQualcomm, Inc. Snapdragon QXM1096\\nQualcomm, Inc. Snapdragon Robotics RB2 Platform\\nQualcomm, Inc. Snapdragon Robotics RB5 Platform\\nQualcomm, Inc. Snapdragon SA2150P\\nQualcomm, Inc. Snapdragon SA4150P\\nQualcomm, Inc. Snapdragon SA4155P\\nQualcomm, Inc. Snapdragon SA6145P\\nQualcomm, Inc. Snapdragon SA6150P\\nQualcomm, Inc. Snapdragon SA6155\\nQualcomm, Inc. Snapdragon SA6155P\\nQualcomm, Inc. Snapdragon SA7255P\\nQualcomm, Inc. Snapdragon SA7775P\\nQualcomm, Inc. Snapdragon SA8145P\\nQualcomm, Inc. Snapdragon SA8150P\\nQualcomm, Inc. Snapdragon SA8155\\nQualcomm, Inc. Snapdragon SA8155P\\nQualcomm, Inc. Snapdragon SA8195P\\nQualcomm, Inc. Snapdragon SA8255P\\nQualcomm, Inc. Snapdragon SA8295P\\nQualcomm, Inc. Snapdragon SA8620P\\nQualcomm, Inc. Snapdragon SA8770P\\nQualcomm, Inc. Snapdragon SA9000P\\nQualcomm, Inc. Snapdragon SAR1250P\\nQualcomm, Inc. Snapdragon SAR2130P\\nQualcomm, Inc. Snapdragon SAR2230P\\nQualcomm, Inc. Snapdragon SD 8 Gen1 5G\\nQualcomm, Inc. Snapdragon SD662\\nQualcomm, Inc. Snapdragon SD865 5G\\nQualcomm, Inc. Snapdragon SDA660\\nQualcomm, Inc. Snapdragon SDM429W\\nQualcomm, Inc. Snapdragon SM6225P\\nQualcomm, Inc. Snapdragon SM6650P\\nQualcomm, Inc. Snapdragon SM7250P\\nQualcomm, Inc. Snapdragon SM7325P\\nQualcomm, Inc. Snapdragon SM7435\\nQualcomm, Inc. Snapdragon SM7550\\nQualcomm, Inc. Snapdragon SM7550P\\nQualcomm, Inc. Snapdragon SM7635P\\nQualcomm, Inc. Snapdragon SM7675\\nQualcomm, Inc. Snapdragon SM7675P\\nQualcomm, Inc. Snapdragon SM8475P\\nQualcomm, Inc. Snapdragon SM8550P\\nQualcomm, Inc. Snapdragon SM8635\\nQualcomm, Inc. Snapdragon SM8635P\\nQualcomm, Inc. Snapdragon SM8650Q\\nQualcomm, Inc. Snapdragon SM8750P\\nQualcomm, Inc. Snapdragon Snapdragon 4 Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 4 Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 429 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 460 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 480 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 480+ 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 3 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 4 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 660 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 662 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 680 4G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 685 4G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 690 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 695 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 7 Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 7+ Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 720G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 765 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 765G 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 768G 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 778G 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 778G+ 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 782G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 7c+ Gen 3 Compute\\nQualcomm, Inc. Snapdragon Snapdragon 7s Gen 3 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8 Elite\\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 3 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8+ Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8+ Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 865 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 865+ 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 870 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 888 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 888+ 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon AR1 Gen 1 Platform\\nQualcomm, Inc. Snapdragon Snapdragon Auto 5G Modem-RF\\nQualcomm, Inc. Snapdragon Snapdragon W5+ Gen 1 Wearable Platform\\nQualcomm, Inc. Snapdragon Snapdragon X53 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon X55 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon XR2 5G Platform\\nQualcomm, Inc. Snapdragon Snapdragon XR2+ Gen 1 Platform\\nQualcomm, Inc. Snapdragon SnapdragonAuto 4GModem\\nQualcomm, Inc. Snapdragon SRV1H\\nQualcomm, Inc. Snapdragon SRV1M\\nQualcomm, Inc. Snapdragon SW5100\\nQualcomm, Inc. Snapdragon SW5100P\\nQualcomm, Inc. Snapdragon SXR2230P\\nQualcomm, Inc. Snapdragon SXR2250P\\nQualcomm, Inc. Snapdragon SXR2330P\\nQualcomm, Inc. Snapdragon SXR2350P\\nQualcomm, Inc. Snapdragon Vision Intelligence 300 Platform\\nQualcomm, Inc. Snapdragon Vision Intelligence 400 Platform\\nQualcomm, Inc. Snapdragon WCD9326\\nQualcomm, Inc. Snapdragon WCD9335\\nQualcomm, Inc. Snapdragon WCD9341\\nQualcomm, Inc. Snapdragon WCD9360\\nQualcomm, Inc. Snapdragon WCD9370\\nQualcomm, Inc. Snapdragon WCD9371\\nQualcomm, Inc. Snapdragon WCD9375\\nQualcomm, Inc. Snapdragon WCD9378\\nQualcomm, Inc. Snapdragon WCD9380\\nQualcomm, Inc. Snapdragon WCD9385\\nQualcomm, Inc. Snapdragon WCD9390\\nQualcomm, Inc. Snapdragon WCD9395\\nQualcomm, Inc. Snapdragon WCN3615\\nQualcomm, Inc. Snapdragon WCN3620\\nQualcomm, Inc. Snapdragon WCN3660B\\nQualcomm, Inc. Snapdragon WCN3680B\\nQualcomm, Inc. Snapdragon WCN3910\\nQualcomm, Inc. Snapdragon WCN3950\\nQualcomm, Inc. Snapdragon WCN3980\\nQualcomm, Inc. Snapdragon WCN3988\\nQualcomm, Inc. Snapdragon WCN3990\\nQualcomm, Inc. Snapdragon WCN6650\\nQualcomm, Inc. Snapdragon WCN6755\\nQualcomm, Inc. Snapdragon WCN7860\\nQualcomm, Inc. Snapdragon WCN7861\\nQualcomm, Inc. Snapdragon WCN7880\\nQualcomm, Inc. Snapdragon WCN7881\\nQualcomm, Inc. Snapdragon WSA8810\\nQualcomm, Inc. Snapdragon WSA8815\\nQualcomm, Inc. Snapdragon WSA8830\\nQualcomm, Inc. Snapdragon WSA8832\\nQualcomm, Inc. Snapdragon WSA8835\\nQualcomm, Inc. Snapdragon WSA8840\\nQualcomm, Inc. Snapdragon WSA8845\\nQualcomm, Inc. Snapdragon WSA8845H&#8221;,&#8221;sourceHref&#8221;:&#8221;&#8221;,&#8221;cvss&#8221;:{&#8220;score&#8221;:6.4,&#8221;severity&#8221;:&#8221;MEDIUM&#8221;,&#8221;vector&#8221;:&#8221;CVSS:3.1\/AV:L\/AC:H\/PR:H\/UI:N\/S:U\/C:H\/I:H\/A:H&#8221;,&#8221;version&#8221;:&#8221;3.1&#8243;},&#8221;cvss2&#8243;:{},&#8221;cvss3&#8243;:{&#8220;version&#8221;:&#8221;&#8221;,&#8221;vectorString&#8221;:&#8221;&#8221;,&#8221;baseScore&#8221;:0,&#8221;baseSeverity&#8221;:&#8221;&#8221;,&#8221;attackVector&#8221;:&#8221;&#8221;,&#8221;attackComplexity&#8221;:&#8221;&#8221;,&#8221;privilegesRequired&#8221;:&#8221;&#8221;,&#8221;userInteraction&#8221;:&#8221;&#8221;,&#8221;scope&#8221;:&#8221;&#8221;,&#8221;confidentialityImpact&#8221;:&#8221;&#8221;,&#8221;integrityImpact&#8221;:&#8221;&#8221;,&#8221;availabilityImpact&#8221;:&#8221;&#8221;,&#8221;cvssV3&#8243;:{&#8220;version&#8221;:&#8221;&#8221;,&#8221;vectorString&#8221;:&#8221;&#8221;,&#8221;baseScore&#8221;:0,&#8221;baseSeverity&#8221;:&#8221;&#8221;,&#8221;attackVector&#8221;:&#8221;&#8221;,&#8221;attackComplexity&#8221;:&#8221;&#8221;,&#8221;privilegesRequired&#8221;:&#8221;&#8221;,&#8221;userInteraction&#8221;:&#8221;&#8221;,&#8221;scope&#8221;:&#8221;&#8221;,&#8221;confidentialityImpact&#8221;:&#8221;&#8221;,&#8221;integrityImpact&#8221;:&#8221;&#8221;,&#8221;availabilityImpact&#8221;:&#8221;&#8221;}},&#8221;href&#8221;:&#8221;&#8221;,&#8221;category_name&#8221;:&#8221;CVE&#8221;,&#8221;post_link&#8221;:&#8221;&#8221;,&#8221;product&#8221;:&#8221;Snapdragon&#8221;,&#8221;version&#8221;:&#8221;5G Fixed Wireless Access Platform&#8221;,&#8221;vendor&#8221;:&#8221;Qualcomm, Inc.&#8221;,&#8221;ai_description&#8221;:&#8221;&#8221;,&#8221;ai_severity&#8221;:&#8221;&#8221;,&#8221;ai_vendor&#8221;:&#8221;&#8221;,&#8221;ai_product&#8221;:&#8221;&#8221;,&#8221;ai_version&#8221;:&#8221;&#8221;,&#8221;ai_score&#8221;:0}<\/p>\n","protected":false},"excerpt":{"rendered":"<p>{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.&#8221;,&#8221;published&#8221;:&#8221;2026-06-01T22:05:29.149Z&#8221;,&#8221;modified&#8221;:&#8221;2026-06-01T22:05:29.149Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/june-2026-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-59610&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-367&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc&#8230;.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,46,12,21,13,7,11,5],"class_list":["post-59054","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-64","tag-exploit","tag-medium","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver_CVE-2025-59610 - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=59054\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver_CVE-2025-59610 - zero redgem\" \/>\n<meta property=\"og:description\" content=\"{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.&#8221;,&#8221;published&#8221;:&#8221;2026-06-01T22:05:29.149Z&#8221;,&#8221;modified&#8221;:&#8221;2026-06-01T22:05:29.149Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/june-2026-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-59610&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-367&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc....\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=59054\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-01T19:06:45+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=59054#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=59054\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver_CVE-2025-59610\",\"datePublished\":\"2026-06-01T19:06:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=59054\"},\"wordCount\":1215,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"CVSS-6.4\",\"exploit\",\"MEDIUM\",\"news\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_cve\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=59054#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=59054\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=59054\",\"name\":\"Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver_CVE-2025-59610 - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2026-06-01T19:06:45+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=59054#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=59054\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=59054#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver_CVE-2025-59610\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver_CVE-2025-59610 - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=59054","og_locale":"en_US","og_type":"article","og_title":"Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver_CVE-2025-59610 - zero redgem","og_description":"{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.&#8221;,&#8221;published&#8221;:&#8221;2026-06-01T22:05:29.149Z&#8221;,&#8221;modified&#8221;:&#8221;2026-06-01T22:05:29.149Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/june-2026-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-59610&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-367&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc....","og_url":"https:\/\/zero.redgem.net\/?p=59054","og_site_name":"zero redgem","article_published_time":"2026-06-01T19:06:45+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=59054#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=59054"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver_CVE-2025-59610","datePublished":"2026-06-01T19:06:45+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=59054"},"wordCount":1215,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","CVSS-6.4","exploit","MEDIUM","news","Security","tapic","Vulnerability"],"articleSection":["category_cve"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=59054#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=59054","url":"https:\/\/zero.redgem.net\/?p=59054","name":"Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver_CVE-2025-59610 - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2026-06-01T19:06:45+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=59054#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=59054"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=59054#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver_CVE-2025-59610"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/59054","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=59054"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/59054\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=59054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=59054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=59054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}