Impact
The vulnerability is a null pointer dereference that occurs during a memory copy operation, causing invalid writes that corrupt memory. This flaw can lead to application or system crashes, potentially affecting the stability and integrity of the affected device. The direct impact is a denial of service for the affected components, with the severity reflected in a CVSS score of 7.8.
Affected Systems
Qualcomm, Inc. Snapdragon mobile processors and associated software components are known to be affected. Specific product models or firmware versions are not listed, indicating that any Snapdragon implementation deploying the vulnerable code path could be at risk.
Risk and Exploitability
The CVSS score of 7.8 denotes high severity, while the EPSS score is not available, so the current exploitation probability cannot be quantified. The vulnerability is not listed in CISA's KEV catalog, implying no confirmed public exploits are known. The likely attack vector appears to be local or remote code that triggers the memory copy operation; however, based on the description, this inference is made rather than directly stated. Exploitation would require the attacker to trigger the vulnerable memory copy operation, which could lead to memory corruption and potential denial of service.
OpenCVE Enrichment