This vulnerability is a classic buffer overflow (CWE-120) in the fingerprint TA of Qualcomm Snapdragon devices. It occurs due to improper size checking when copying input data, leading to memory corruption. The CVSS 3.1 base score is 7.8, reflecting local attack vector with low complexity, requiring low privileges and no user interaction, and resulting in high impact on confidentiality, integrity, and availability. The affected versions explicitly include QCA6696, SW6100, WSA8840, and WSA8845. No vendor advisory or patch information is currently available, and no exploits are known in the wild.

Successful exploitation could allow an attacker with local access and low privileges to cause memory corruption in the fingerprint TA, potentially leading to arbitrary code execution or denial of service. The impact affects confidentiality, integrity, and availability at a high level. However, exploitation requires local access and low privileges, limiting remote attack feasibility.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict local access to affected devices and monitor for unusual behavior related to fingerprint functionality. Follow Qualcomm's official channels for updates on fixes.