A use-after-free flaw exists in the Snapdragon driver when it handles repeated IOCTL calls that share the same buffer file descriptor. The driver later accesses memory that has already been freed, resulting in memory corruption. The weakness is classified as CWE-416 and may allow an attacker to corrupt device or system memory, potentially leading to device crashes or unintended behavior.

All Qualcomm Snapdragon chipsets or firmware that process IOCTL calls using shared buffer file descriptors are impacted. The advisory does not disclose specific chipset or firmware versions, so the attack surface includes any Snapdragon driver that allows reuse of buffer FDs across multiple IOCTL requests.

The CVSS score of 6.6 indicates moderate severity, while the EPSS score of <1% shows a very low probability of exploitation. It is not listed in the CISA KEV catalog. The likely attack vector requires an attacker with the ability to issue privileged IOCTL commands to the driver, implying that a privileged or locally memory integrity or device availability.