This vulnerability (CVE-2025-59615) involves a use-after-free condition (CWE-416) in Qualcomm Snapdragon devices. It occurs due to improper synchronization when invoking device input/output control operations related to mapping and unmapping persistent memory buffers, resulting in memory corruption. The CVSS 3.1 base score is 6.6 (medium severity) with attack vector local, high attack complexity, low privileges required, user interaction required, scope changed, and impacts including low confidentiality, high integrity, and low availability. The affected products include a broad range of Qualcomm Snapdragon chipsets and wireless connectivity modules. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

Successful exploitation could cause memory corruption leading to partial confidentiality loss, high integrity compromise, and low availability impact on affected Qualcomm Snapdragon devices. The vulnerability requires local access with user interaction and has a high attack complexity, limiting the ease of exploitation. The scope of impact is changed, indicating that the vulnerability affects resources beyond the initially vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users and administrators should follow Qualcomm's security advisories and best practices for limiting local access and user interaction on affected devices. No specific mitigation or workaround is provided in the available data.