CVE-2025-59616

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6700:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:molokai_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:molokai:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:orne_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:orne:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:qcm5430_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm5430:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:qmp1000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qmp1000:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:qmp2001_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qmp2001:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:video_collaboration_vc3_platform:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:sc8380xp_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sc8380xp:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd865_5g:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:qualcomm:sm6850_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm6850:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:qualcomm:sm8845p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8845p:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_460_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_460_mobile_platform:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_662_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_662_mobile_platform:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_8_elite_gen_5:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_ar1_gen_1_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_ar1_gen_1_platform:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_xr2_5g_platform:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_xr2\+_gen_1_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_xr2\+_gen_1_platform:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sxr2230p:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:qualcomm:sxr2250p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sxr2250p:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9378:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:qualcomm:wcn6450_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6450:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:qualcomm:wcn7760_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7760:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*

Configuration 44 (hide)

AND
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND
cpe:2.3:o:qualcomm:wsa8850_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8850:-:*:*:*:*:*:*:*

Configuration 47 (hide)

AND
cpe:2.3:o:qualcomm:wsa8850w_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8850w:-:*:*:*:*:*:*:*

Configuration 48 (hide)

AND
cpe:2.3:o:qualcomm:wsa8855c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8855c:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-07-06 21:16

Updated : 2026-07-07 17:00


NVD link : CVE-2025-59616

Mitre link : CVE-2025-59616

CVE.ORG link : CVE-2025-59616


JSON object : View

Products Affected

qualcomm

  • wcn6450_firmware
  • snapdragon_8_elite_gen_5_firmware
  • wcn7880
  • sc8380xp_firmware
  • fastconnect_6700_firmware
  • snapdragon_8_elite_gen_5
  • wcn7760
  • wcd9375
  • wsa8840
  • wcd9395
  • orne
  • molokai
  • qmp2001_firmware
  • pandeiro
  • snapdragon_xr2_5g_platform
  • wsa8832
  • wsa8840_firmware
  • snapdragon_ar1_gen_1_platform_firmware
  • wcd9380
  • orne_firmware
  • fastconnect_6700
  • wcn7881_firmware
  • wsa8845
  • wsa8830_firmware
  • snapdragon_662_mobile_platform_firmware
  • molokai_firmware
  • wsa8845_firmware
  • wcd9375_firmware
  • wcd9378
  • wsa8850w_firmware
  • wsa8850
  • wsa8850w
  • wcn7860_firmware
  • sxr2230p_firmware
  • qcm5430
  • sxr2250p_firmware
  • wcd9395_firmware
  • snapdragon_xr2\+_gen_1_platform
  • wsa8845h
  • sxr2230p
  • wsa8855c
  • qmp1000_firmware
  • wcn7880_firmware
  • qcm6490_firmware
  • qcm6490
  • qmp2001
  • snapdragon_xr2_5g_platform_firmware
  • wcd9370
  • wsa8810_firmware
  • sd865_5g
  • sm8845p
  • wsa8855c_firmware
  • sd865_5g_firmware
  • snapdragon_662_mobile_platform
  • qcm5430_firmware
  • wcn7860
  • wcd9378_firmware
  • wsa8832_firmware
  • sm6850_firmware
  • sm6850
  • wcd9385_firmware
  • snapdragon_460_mobile_platform_firmware
  • wsa8835_firmware
  • wcn7760_firmware
  • wsa8810
  • qmp1000
  • fastconnect_6900_firmware
  • snapdragon_ar1_gen_1_platform
  • wsa8835
  • wsa8830
  • wsa8845h_firmware
  • sm8845p_firmware
  • wcn6450
  • fastconnect_7800_firmware
  • wsa8815
  • wcd9380_firmware
  • fastconnect_7800
  • wcn3950_firmware
  • wsa8815_firmware
  • wcn7881
  • snapdragon_460_mobile_platform
  • wsa8850_firmware
  • wcd9385
  • wcn7861_firmware
  • video_collaboration_vc3_platform
  • fastconnect_6900
  • wcn3950
  • pandeiro_firmware
  • wcd9370_firmware
  • sxr2250p
  • wcn3988
  • snapdragon_xr2\+_gen_1_platform_firmware
  • wcn3988_firmware
  • sc8380xp
  • video_collaboration_vc3_platform_firmware
  • wcn7861
CWE
CWE-416

Use After Free