CVE-2025-59617
6.6
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L
Summary
Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | FastConnect 6700 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 6900 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 7800 | affected |
| Qualcomm, Inc. | Snapdragon | Molokai | affected |
| Qualcomm, Inc. | Snapdragon | Orne | affected |
| Qualcomm, Inc. | Snapdragon | Pandeiro | affected |
| Qualcomm, Inc. | Snapdragon | QCM5430 | affected |
| Qualcomm, Inc. | Snapdragon | QCM6490 | affected |
| Qualcomm, Inc. | Snapdragon | QMP1000 | affected |
| Qualcomm, Inc. | Snapdragon | QMP2001 | affected |
| Qualcomm, Inc. | Snapdragon | Qualcomm Video Collaboration VC3 Platform | affected |
| Qualcomm, Inc. | Snapdragon | SC8380XP | affected |
| Qualcomm, Inc. | Snapdragon | SD865 5G | affected |
| Qualcomm, Inc. | Snapdragon | SM6850 | affected |
| Qualcomm, Inc. | Snapdragon | SM8845P | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 460 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 662 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8 Elite Gen 5 | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon AR1 Gen 1 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon XR2 5G Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon XR2+ Gen 1 Platform | affected |
| Qualcomm, Inc. | Snapdragon | SXR2230P | affected |
| Qualcomm, Inc. | Snapdragon | SXR2250P | affected |
| Qualcomm, Inc. | Snapdragon | WCD9370 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9375 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9378 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9380 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9385 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9395 | affected |
| Qualcomm, Inc. | Snapdragon | WCN3950 | affected |
| Qualcomm, Inc. | Snapdragon | WCN3988 | affected |
| Qualcomm, Inc. | Snapdragon | WCN6450 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7760 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7860 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7861 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7880 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7881 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8810 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8815 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8830 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8832 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8835 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8840 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8845 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8845H | affected |
| Qualcomm, Inc. | Snapdragon | WSA8850 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8850W | affected |
| Qualcomm, Inc. | Snapdragon | WSA8855C | affected |
Weaknesses
- CWE-416: CWE-416 Use After Free
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.