The vulnerability is a stack‑based buffer overflow that occurs when the Snapdragon display subsystem processes command line information. Improper initialization of a variable allows an attacker to write data out of bounds of the intended buffer, corrupting the stack and potentially enabling arbitrary code execution or a system crash. The weakness is identified as CWE‑121, indicating a classic stack corruption flaw.

Qualcomm Snapdragon devices are affected. Exact firmware or Android OS version information is not provided in the available data, so all Snapdragon products potentially running the vulnerable display code may be impacted.

With a CVSS score of 7.2 the vulnerability is classified as high severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. Based on the description, the likely attack vector is local or privileged input to the display command line; remote exploitation is not explicitly supported by the data. The lack of a documented exploitation path suggests that successful attack would require physical access or local privileges, but the high severity indicates that a zero‑day exploitation, if discovered, could be dangerous.