This vulnerability (CVE-2025-59617) involves a use-after-free condition (CWE-416) in Qualcomm Snapdragon products. It arises when multiple IOCTL calls are processed using the same buffer file descriptor input, leading to memory corruption. The affected products include a range of Qualcomm chipsets and wireless components identified by specific model numbers. The CVSS v3.1 score is 6.6, indicating medium severity, with attack vector local, high attack complexity, low privileges required, and user interaction needed. The impact includes partial confidentiality loss, high integrity impact, and low availability impact. No vendor advisory or patch information is currently provided, and no known exploits have been reported.

Successful exploitation could lead to memory corruption resulting in partial loss of confidentiality, high integrity compromise, and low availability impact on affected Qualcomm Snapdragon components. The vulnerability requires local access with user interaction and has a high attack complexity, limiting ease of exploitation. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit local access to affected devices and avoid processing multiple IOCTL calls with the same buffer file descriptor input where possible.