This vulnerability (CVE-2025-59616) is a use-after-free issue (CWE-416) in Qualcomm Snapdragon products. It arises when multiple IOCTL calls reuse the same buffer file descriptor, causing the system to access memory that has already been freed, resulting in memory corruption. The vulnerability affects a broad range of Qualcomm Snapdragon chipsets and wireless connectivity modules. The CVSS 3.1 vector indicates the attack requires local access with high attack complexity, low privileges, and user interaction, but can lead to a partial confidentiality loss, high integrity impact, and low availability impact. No official patch or remediation level has been published by Qualcomm as of the data provided.

Successful exploitation could lead to memory corruption, potentially allowing an attacker with local access and limited privileges to cause integrity violations and partial confidentiality loss on affected devices. The availability impact is low. This could affect device stability or security depending on the context of use. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, monitor Qualcomm's advisories for updates. Until a patch is available, limit local access to trusted users and avoid untrusted applications invoking multiple IOCTL calls with the same buffer file descriptor on affected devices.