CVE-2025-59603 PUBLISHED

Out-of-bounds Write in Computer Vision

Assigner: qualcomm
Reserved: 18.09.2025 Published: 02.03.2026 Updated: 03.03.2026

Memory Corruption when processing invalid user address with nonstandard buffer address.

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.8

CVSS 3.1

Vendor	Qualcomm, Inc.
Product	Snapdragon
Versions	Default: unaffected Version Cologne is affected Version FastConnect 6900 is affected Version FastConnect 7800 is affected Version QCA0000 is affected Version SC8380XP is affected Version SD865 5G is affected Version Snapdragon XR2 5G Platform is affected Version Snapdragon XR2+ Gen 1 Platform is affected Version SXR2230P is affected Version SXR2250P is affected Version WCD9378C is affected Version WCD9380 is affected Version WCD9385 is affected Version WSA8810 is affected Version WSA8815 is affected Version WSA8830 is affected Version WSA8832 is affected Version WSA8835 is affected Version WSA8840 is affected Version WSA8845 is affected Version WSA8845H is affected Version X2000077 is affected Version X2000086 is affected Version X2000090 is affected Version X2000092 is affected Version X2000094 is affected Version XG101002 is affected Version XG101032 is affected Version XG101039 is affected