A memory corruption error arises when a buffer previously allocated is resized while its contents are being modified. This mismatch between buffer size and the ongoing write or copy operation triggers a buffer overrun (CWE-120) and out‑of‑bounds write (CWE-787). The flaw can lead to crashes or undefined behavior that might be leveraged as a local privilege escalation or denial of service on the automotive audio subsystem.

Qualcomm Snapdragon automotive audio platforms are impacted; specific affected versions are not listed in the CNA data.

The CVSS score of 6.5 indicates moderate severity. The EPSS score is less than 1%, implying very low exploitation probability. The vulnerability is not listed in CISA's KEV catalog. The likely attack vector involves manipulating audio data or driver inputs that trigger the dynamic resizing while data is being processed, requiring local access or influence over the audio subsystem. A capable local attacker could corrupt memory and potentially compromise the vehicle's audio or other connected systems.