This vulnerability (CVE-2026-25260) is a TOCTOU race condition categorized under CWE-367 affecting Qualcomm Snapdragon components. It occurs when shared buffers are accessed without proper validation against concurrent modifications by user-mode inputs, leading to memory corruption. The flaw impacts a broad range of Snapdragon versions including FastConnect and WCD series chips. The CVSS 3.1 score is 7.8, indicating high severity with local attack vector, low complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by Qualcomm as of the published date.

Successful exploitation can result in memory corruption, potentially allowing an attacker with local privileges to compromise confidentiality, integrity, and availability of the affected system. The vulnerability affects multiple Snapdragon chipsets used in various devices. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users and administrators should monitor Qualcomm's advisories for updates. No specific mitigations have been provided by the vendor at this time.