This vulnerability (CVE-2026-25259) is an out-of-bounds write (CWE-787) in Qualcomm Snapdragon devices triggered by handling multiple IOCTL commands related to escape operations. The issue results in memory corruption, which can compromise system confidentiality, integrity, and availability. Affected products include various Snapdragon chipsets and modules such as FastConnect 6900, FastConnect 7800, WCD9378C, and others. The CVSS v3.1 base score is 7.8, indicating high severity with local attack vector, low complexity, low privileges required, no user interaction, and impacts across confidentiality, integrity, and availability. As of the published date, no patch or official remediation level is documented, and no exploits are known in the wild.

Successful exploitation of this vulnerability could allow a local attacker with low privileges to cause memory corruption, potentially leading to unauthorized disclosure of information, modification of data, or denial of service on affected Qualcomm Snapdragon devices. The impact is rated high due to the combined confidentiality, integrity, and availability effects.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation level has been published, users and administrators should monitor Qualcomm's advisories for updates. Until a patch is available, limiting access to local interfaces that can issue IOCTL commands may reduce risk.