CVE-2025-59615: Use After Free in Computer Vision

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-06 · updated 2026-09-29
Weakness: CWE-416

Description

Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.

Affected products

Qualcomm Fastconnect 6700 Firmware: all versions
Qualcomm Fastconnect 6900 Firmware: all versions
Qualcomm Fastconnect 7800 Firmware: all versions
Qualcomm Molokai Firmware: all versions
Qualcomm Orne Firmware: all versions
Qualcomm Pandeiro Firmware: all versions
Qualcomm Qcm5430 Firmware: all versions
Qualcomm Qcm6490 Firmware: all versions
Qualcomm Qln1083Bd Firmware: all versions
Qualcomm Qln1086Bd Firmware: all versions
Qualcomm Qmp1000 Firmware: all versions
Qualcomm Qmp2001 Firmware: all versions
Qualcomm Qpa1083Bd Firmware: all versions
Qualcomm Qpa1086Bd Firmware: all versions
Qualcomm Qxm1093 Firmware: all versions
Qualcomm Qxm1094 Firmware: all versions
Qualcomm Qxm1095 Firmware: all versions
Qualcomm Qxm1096 Firmware: all versions
Qualcomm Sc8380Xp Firmware: all versions
Qualcomm Sd865 5G Firmware: all versions
Qualcomm Sm6850 Firmware: all versions
Qualcomm Sm8845P Firmware: all versions
Qualcomm Snapdragon 460 Mobile Platform Firmware: all versions
Qualcomm Snapdragon 662 Mobile Platform Firmware: all versions
Qualcomm Snapdragon 8 Elite Gen 5 Firmware: all versions
Qualcomm Snapdragon Ar1 Gen 1 Platform Firmware: all versions
Qualcomm Snapdragon Xr2+ Gen 1 Platform Firmware: all versions
Qualcomm Snapdragon Xr2 5G Platform Firmware: all versions
Qualcomm Sxr2230P Firmware: all versions
Qualcomm Sxr2250P Firmware: all versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.html

Get alerted when CVE-2025-59615 or the next vulnerability affects your stack