7.8

CVE-2025-59616

Use After Free in Computer Vision

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Molokai Firmware Version-
   Qualcomm ≫ Molokai Version-
Qualcomm ≫ Orne Firmware Version-
   Qualcomm ≫ Orne Version-
Qualcomm ≫ Pandeiro Firmware Version-
   Qualcomm ≫ Pandeiro Version-
Qualcomm ≫ Qcm5430 Firmware Version-
   Qualcomm ≫ Qcm5430 Version-
Qualcomm ≫ Qcm6490 Firmware Version-
   Qualcomm ≫ Qcm6490 Version-
Qualcomm ≫ Qmp1000 Firmware Version-
   Qualcomm ≫ Qmp1000 Version-
Qualcomm ≫ Qmp2001 Firmware Version-
   Qualcomm ≫ Qmp2001 Version-
Qualcomm ≫ Sc8380xp Firmware Version-
   Qualcomm ≫ Sc8380xp Version-
Qualcomm ≫ Sd865 5g Firmware Version-
   Qualcomm ≫ Sd865 5g Version-
Qualcomm ≫ Sm6850 Firmware Version-
   Qualcomm ≫ Sm6850 Version-
Qualcomm ≫ Sm8845p Firmware Version-
   Qualcomm ≫ Sm8845p Version-
Qualcomm ≫ Sxr2230p Firmware Version-
   Qualcomm ≫ Sxr2230p Version-
Qualcomm ≫ Sxr2250p Firmware Version-
   Qualcomm ≫ Sxr2250p Version-
Qualcomm ≫ Wcd9370 Firmware Version-
   Qualcomm ≫ Wcd9370 Version-
Qualcomm ≫ Wcd9375 Firmware Version-
   Qualcomm ≫ Wcd9375 Version-
Qualcomm ≫ Wcd9378 Firmware Version-
   Qualcomm ≫ Wcd9378 Version-
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380 Version-
Qualcomm ≫ Wcd9385 Firmware Version-
   Qualcomm ≫ Wcd9385 Version-
Qualcomm ≫ Wcd9395 Firmware Version-
   Qualcomm ≫ Wcd9395 Version-
Qualcomm ≫ Wcn3950 Firmware Version-
   Qualcomm ≫ Wcn3950 Version-
Qualcomm ≫ Wcn3988 Firmware Version-
   Qualcomm ≫ Wcn3988 Version-
Qualcomm ≫ Wcn6450 Firmware Version-
   Qualcomm ≫ Wcn6450 Version-
Qualcomm ≫ Wcn7760 Firmware Version-
   Qualcomm ≫ Wcn7760 Version-
Qualcomm ≫ Wcn7860 Firmware Version-
   Qualcomm ≫ Wcn7860 Version-
Qualcomm ≫ Wcn7861 Firmware Version-
   Qualcomm ≫ Wcn7861 Version-
Qualcomm ≫ Wcn7880 Firmware Version-
   Qualcomm ≫ Wcn7880 Version-
Qualcomm ≫ Wcn7881 Firmware Version-
   Qualcomm ≫ Wcn7881 Version-
Qualcomm ≫ Wsa8810 Firmware Version-
   Qualcomm ≫ Wsa8810 Version-
Qualcomm ≫ Wsa8815 Firmware Version-
   Qualcomm ≫ Wsa8815 Version-
Qualcomm ≫ Wsa8830 Firmware Version-
   Qualcomm ≫ Wsa8830 Version-
Qualcomm ≫ Wsa8832 Firmware Version-
   Qualcomm ≫ Wsa8832 Version-
Qualcomm ≫ Wsa8835 Firmware Version-
   Qualcomm ≫ Wsa8835 Version-
Qualcomm ≫ Wsa8840 Firmware Version-
   Qualcomm ≫ Wsa8840 Version-
Qualcomm ≫ Wsa8845 Firmware Version-
   Qualcomm ≫ Wsa8845 Version-
Qualcomm ≫ Wsa8845h Firmware Version-
   Qualcomm ≫ Wsa8845h Version-
Qualcomm ≫ Wsa8850 Firmware Version-
   Qualcomm ≫ Wsa8850 Version-
Qualcomm ≫ Wsa8850w Firmware Version-
   Qualcomm ≫ Wsa8850w Version-
Qualcomm ≫ Wsa8855c Firmware Version-
   Qualcomm ≫ Wsa8855c Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
product-security@qualcomm.com 6.6 0.8 5.3
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.html
Patch
Vendor Advisory