CVE-2025-59617: Qualcomm Snapdragon Use-After-Free in IOCTL processing

CVE-2025-59617 · Severity: medium · CVSS 6.6 · Published 2026-07-06

A memory corruption vulnerability exists in various Qualcomm Snapdragon chipsets used in mobile devices, IoT platforms, and automotive systems. An attacker with local access to a device could potentially cause system instability or gain unauthorized access to sensitive data. This issue affects the core hardware components responsible for connectivity and processing in millions of consumer electronics.

Technologies: Qualcomm Fastconnect 6700, Qualcomm Fastconnect 6900, Qualcomm Fastconnect 7800, Qualcomm Qcm5430, Qualcomm Qcm6490, Qualcomm Snapdragon XR2 5G, Qualcomm Snapdragon 8 Elite Gen 5, Qualcomm Wcn7880. Vendors: Qualcomm.

Quick answers

Is CVE-2025-59617 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2025-59617 being exploited in the wild.
How severe is CVE-2025-59617?
Medium severity, with a CVSS score of 6.6, published 6 July 2026.
Which products and versions are affected?
Qualcomm, Inc. Snapdragon Mobile FastConnect 6700, FastConnect 6900, FastConnect 7800, QCM5430, QCM6490, SD865 5G, Snapdragon 460, Snapdragon 662, Snapdragon 8 Elite Gen 5, Snapdragon XR2 5G, WCN7880, and others.
Is there a fix for CVE-2025-59617?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-59617 attacked?
It is attacked with local access, in device firmware.
Am I affected by CVE-2025-59617?
Check whether you run Qualcomm Fastconnect 6700, Qualcomm Fastconnect 6900, Qualcomm Fastconnect 7800 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is a Use-After-Free (CWE-416) issue that leads to memory corruption. It occurs when the system processes multiple Input/Output Control (IOCTL) calls that utilize the same buffer file descriptor input simultaneously or in rapid succession. An attacker with low-privileged local access could exploit this race condition or improper reference counting to corrupt system memory. Successful exploitation could allow for a scope cross (S:C), potentially leading to unauthorized information disclosure or elevated execution integrity. The vulnerability affects a wide range of Snapdragon platforms including Mobile, Compute, and Consumer IOT.

Affected products

  • Qualcomm, Inc. Snapdragon Mobile FastConnect 6700, FastConnect 6900, FastConnect 7800, QCM5430, QCM6490, SD865 5G, Snapdragon 460, Snapdragon 662, Snapdragon 8 Elite Gen 5, Snapdragon XR2 5G, WCN7880, and others

Timeline

  • 2026-07-06: advisory: Published in Qualcomm July 2026 Security Bulletin
  • 2026-07-06: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.