The vulnerability is a time‑of‑check/time‑of‑use race condition in Qualcomm’s Snapdragon DSP service that can cause memory corruption at the kernel level during process creation. This race occurs when an allocation fails during kernel processing, leading to corrupted kernel memory. No additional impact beyond the stated memory corruption is described.

Qualcomm Snapdragon processors are the identified affected vendors and products. No specific firmware or kernel versions are listed, so any device that includes the DSP service and has not received a vendor update could be vulnerable.

The CVSS score of 7.8 indicates high severity, and the EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector would likely require local or privileged access because the flaw occurs during internal DSP process creation. No public exploits are documented. As such, the risk remains high pending a vendor fix.