This vulnerability, tracked as CVE-2026-25289 and classified under CWE-121 (Stack-based Buffer Overflow), affects numerous Qualcomm Snapdragon chipsets. The issue arises from improper handling of Device Capability Extended attributes in NAN Service Discovery Frames when these frames contain invalid length values, causing memory corruption. The CVSS v3.1 base score is 9.6, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and scope change. The impact includes full compromise of confidentiality, integrity, and availability. No official patch or remediation guidance is currently available, and no known exploits in the wild have been reported.

Successful exploitation of this vulnerability can result in complete compromise of the affected device's confidentiality, integrity, and availability. Given the critical CVSS score and the nature of the flaw (stack-based buffer overflow), attackers could potentially execute arbitrary code or cause denial of service remotely without any privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor Qualcomm's advisories for updates. No vendor-provided mitigation or temporary fix is currently documented.