A use‑after‑free vulnerability occurs in the automotive GPU driver when the performance counter deselect operation copies data from a memory region that has already been freed. This flaw can lead to memory corruption, potentially allowing an attacker to trigger crashes, create data leakage, or even execute arbitrary code depending on the context in which the driver runs.

Qualcomm Snapdragon platforms are affected. Specific model or firmware releases are not listed, so all devices that incorporate the referenced GPU driver should be evaluated for the presence of this issue.

The CVSS score of 7.8 indicates high severity. No EPSS score is available and the vulnerability is not yet listed in the CISA KEV catalog, suggesting that while the flaw is serious, the probability of widespread exploitation is uncertain. The attack vector is not explicitly documented; it is likely to require local or privileged access to the device’s GPU subsystem, and the use‑after‑free weakness could be leveraged to destabilize the system or facilitate further privilege escalation.