This vulnerability (CVE-2025-59615) involves a use-after-free condition (CWE-416) in Qualcomm Snapdragon devices. It occurs due to improper synchronization when invoking device input/output control operations related to mapping and unmapping persistent memory buffers, leading to memory corruption. The issue affects a range of Snapdragon chip versions explicitly listed. The CVSS 3.1 base score is 6.6, reflecting a medium severity with local attack vector, high attack complexity, low privileges required, user interaction needed, and impacts on confidentiality, integrity, and availability. There is no vendor advisory or patch information available, and no known exploits have been reported.

Successful exploitation could lead to memory corruption, potentially allowing an attacker to impact the integrity and availability of the affected device. Confidentiality impact is low, while integrity impact is high and availability impact is low. The attack requires local access with low privileges and user interaction, and the complexity is high.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should follow Qualcomm's security advisories and avoid untrusted local interactions that could trigger the vulnerability.