CVE-2015-0568: Use-after-free vulnerability in the msm_set_crop function in drivers/media/video/msm/msm_camera.c in the MS...

Security readout for executives and security teams

This is a Linux kernel camera-driver memory bug affecting Qualcomm MSM Android-related camera code. A malicious local application could trigger memory corruption through a crafted ioctl call, potentially gaining higher privileges or crashing the device. The provided sources do not identify specific OEM device models, patch levels, or confirmed exploitation. Exposure is most likely on older Android devices or vendor kernels using Qualcomm MSM camera driver code derived from the affected Linux 3.x QuIC contributions. The provided source bundle lists affected vendor and product as n/a, so exact device scope must be confirmed through OEM or kernel build evidence. Prioritize this for legacy mobile or embedded fleets using Qualcomm MSM Android kernels. Business urgency is high where devices handle sensitive data and cannot be patched, but lower for environments without affected devices. No active exploitation is evidenced in the provided sources. Mitigation focus: Check Qualcomm, CodeAurora, Android, and OEM guidance for CVE-2015-0568 fixes.; Update affected Android firmware or vendor kernel when a trusted vendor fix exists.; Prioritize retirement or isolation of unsupported MSM Android devices..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.