This vulnerability (CVE-2025-59605) is classified as CWE-787: Out-of-bounds Write. It occurs in Qualcomm Snapdragon products when device identifier strings longer than expected are processed, leading to memory corruption. The issue affects numerous Snapdragon platforms and related hardware components, as explicitly listed. The CVSS 3.1 base score is 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating that an attacker with local access and low privileges can cause high impact on confidentiality, integrity, and availability without user interaction. The vulnerability was published on June 1, 2026, and no official fix or patch has been documented in the provided data. No known exploits have been reported in the wild.

Successful exploitation of this vulnerability can lead to memory corruption, which may result in unauthorized disclosure of information, modification of data, or denial of service on affected Qualcomm Snapdragon devices. The high CVSS score reflects the potential for significant impact on device security and stability. However, exploitation requires local access with low privileges, and no public exploits are known at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users and administrators should monitor Qualcomm's advisories for updates. Until a patch is available, limiting local access and avoiding processing untrusted device identifier strings may reduce risk.