This vulnerability (CVE-2025-59607) in Qualcomm Snapdragon devices is due to untrusted pointer dereference (CWE-822) that causes memory corruption when large input data exceeds normal allocation limits during copying operations. The flaw affects specific Snapdragon versions: WCD9380, WCD9385, WSA8830, WSA8835, WSA8840, and WSA8845. The CVSS 3.1 base score is 7.8 with attack vector local, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time, and no known exploits have been observed.

Successful exploitation can lead to memory corruption, potentially allowing an attacker with local access and low privileges to compromise confidentiality, integrity, and availability of the affected Snapdragon device. The high CVSS score reflects the severity of these impacts. However, no active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit local access to affected devices and monitor for vendor updates.