This vulnerability (CVE-2025-59616) involves a use-after-free condition (CWE-416) in Qualcomm Snapdragon products. The issue arises during the handling of multiple IOCTL calls that reuse the same buffer file descriptor, causing the system to access memory that has already been freed. This memory corruption can impact confidentiality, integrity, and availability, as reflected in the CVSS vector (Confidentiality: Low, Integrity: High, Availability: Low). The affected products include a range of Qualcomm Snapdragon chipsets and related components identified by specific model numbers. No vendor advisory or patch information is currently available, and no known exploits have been reported.

The vulnerability can lead to memory corruption, potentially allowing an attacker with local access and low privileges to cause integrity and availability impacts on the affected device. Confidentiality impact is rated low. The CVSS score of 6.6 reflects a medium severity. Exploitation requires local access with user interaction and high attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, users should monitor Qualcomm's advisories for updates. Until a patch is available, limiting local access and avoiding untrusted IOCTL calls may reduce risk.