A vulnerability that causes a stack-based buffer overflow in Qualcomm Snapdragon Windows drivers when they process an incorrect trusted application request. The flaw can corrupt memory, potentially allowing an attacker to execute arbitrary code or trigger a denial of service. This weakness is classified as CWE‑121 and poses a risk of privilege escalation on affected systems.

Qualcomm Snapdragon devices running the Windows interface are potentially affected. Specific driver versions are not disclosed, so all Qualcomm Snapdragon Windows drivers that implement the trusted application request handling remain vulnerable until a vendor fix is released. Additional details would be available in updated vendor release notes.

The CVSS score of 6.7 indicates moderate severity. The EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector is local, where a user or process can forge an incorrect trusted application request to the driver. Without a publicly known exploit, the precise risk is uncertain; however, the memory corruption could be leveraged to elevate privileges if local code execution is achieved.