This vulnerability in Qualcomm Snapdragon products results from improper validation of output buffer sizes, leading to a buffer over-read condition. This memory corruption issue can impact confidentiality, integrity, and availability of affected devices. The CVSS 3.1 base score is 7.8, reflecting a high severity with local attack vector, low complexity, low privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. Affected products include various Snapdragon compute platforms, FastConnect modules, and Qualcomm video and wireless components. No vendor advisory or patch information is currently available to confirm remediation status.

Successful exploitation could allow an attacker with local access and low privileges to cause memory corruption, potentially leading to disclosure of sensitive information, modification of data, or denial of service on affected Qualcomm Snapdragon devices. The vulnerability impacts confidentiality, integrity, and availability as indicated by the CVSS vector. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit local access to affected devices and monitor for vendor updates. No vendor advisory or official remediation instructions have been provided at this time.