This vulnerability involves exposure of private personal information due to improper handling of IPSec negotiation failures during NG-eCall SIP signaling in Qualcomm Snapdragon devices. When IPSec negotiation fails or is not established correctly, sensitive data may be disclosed to unauthorized actors. The issue is tracked as CWE-359 (Exposure of Private Personal Information to an Unauthorized Actor). The CVSS 3.1 vector indicates the attack requires adjacent network access with low attack complexity, no privileges or user interaction needed, and impacts confidentiality with high severity but no impact on integrity or availability. There is no vendor advisory or patch available at this time.

The vulnerability allows unauthorized actors on adjacent networks to gain access to private personal information during NG-eCall SIP signaling if IPSec negotiation fails or is not properly established. This compromises confidentiality but does not affect integrity or availability. The medium severity score reflects the moderate risk posed by this information disclosure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or mitigation instructions have been provided by Qualcomm as of the publication date. Users and administrators should monitor Qualcomm advisories for updates and apply any future patches promptly.