This vulnerability (CVE-2025-59617) involves a use-after-free condition (CWE-416) in Qualcomm Snapdragon products. It arises when multiple IOCTL calls are processed using the same buffer file descriptor, leading to memory corruption. The affected products include a range of Snapdragon chipsets and wireless connectivity modules. The CVSS 3.1 vector indicates the attack requires local access with high attack complexity, low privileges, and user interaction, but can result in a partial confidentiality loss, high integrity impact, and low availability impact. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation could lead to memory corruption, potentially allowing an attacker with local access and limited privileges to cause high integrity impact, such as unauthorized modification of data or code execution. Confidentiality impact is limited, and availability impact is low. The vulnerability requires user interaction and has high attack complexity, reducing the likelihood of widespread exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to affected devices and avoid processing multiple IOCTL calls with the same buffer file descriptor input if possible. Monitor Qualcomm's advisories for updates on patches or mitigations.