Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check.
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html