CVE-2025-59614

MEDIUM

Qualcomm, Snapdragon - Out-Of-Bounds Write in Windows Compute

Title source: rule
STIX 2.1

Description

Memory Corruption when sending random number generator command with insufficient output buffer size.

Scores

CVSS v3 6.7
EPSS 0.0008
EPSS Percentile 0.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (40)
qualcomm/cologne_firmware
qualcomm/fastconnect_6900_firmware
qualcomm/fastconnect_7800_firmware
qualcomm/iqx5121_firmware
qualcomm/iqx7181_firmware
qualcomm/qca0000_firmware
qualcomm/sc8380xp_firmware
qualcomm/wcd9378c_firmware
qualcomm/wcd9380_firmware
qualcomm/wcd9385_firmware
... and 30 more
Published Jun 01, 2026
Tracked Since Jun 02, 2026