This vulnerability, identified as CWE-190 (Integer Overflow or Wraparound), occurs in Qualcomm Snapdragon chipsets QCA6595 and QCA6696. It arises when processing a packet whose size approaches the maximum allowed value, causing an integer overflow that leads to memory corruption. The CVSS v3.1 base score is 7.8, indicating a high severity with local attack vector, low attack complexity, requiring low privileges and no user interaction, and impacts confidentiality, integrity, and availability. The vendor has not provided a remediation level or patch information as of the published date.

Successful exploitation can result in memory corruption, potentially allowing an attacker with local access and low privileges to compromise confidentiality, integrity, and availability of the affected device. This could lead to unauthorized data access, modification, or denial of service conditions on devices using the affected Snapdragon chipsets.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to affected devices and monitor for unusual behavior. No vendor-provided mitigations or temporary fixes are currently documented.