This vulnerability (CVE-2026-25284) is a buffer over-read (CWE-126) in Qualcomm Snapdragon devices WSA8840 and WSA8845. It occurs when a pointer is reused after being deallocated, which can cause the system to read memory beyond the intended buffer boundaries. This flaw can lead to information disclosure, as unauthorized data may be read from memory. The CVSS 3.1 base score is 7.3, with attack vector local, low attack complexity, low privileges required, no user interaction, scope changed, high confidentiality impact, no integrity impact, and low availability impact.

Successful exploitation can disclose sensitive information from memory due to buffer over-read. The vulnerability does not affect integrity but can impact system availability to a limited extent. No active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit local access to affected devices and monitor for updates from Qualcomm regarding patches or mitigations.