A use‑after‑free condition occurs in Qualcomm’s DSP service when asynchronous threads concurrently read shared performance‑counter data during FastRPC calls. The vulnerability can corrupt memory, potentially allowing an attacker to execute arbitrary code or cause a denial of service by destabilizing the DSP subsystem. The impact is limited to the affected device and does not automatically affect other system components unless the DSP layer is exploited to compromise higher‑level services.

Qualcomm, Inc. Snapdragon processors are impacted. The exact sub‑model and firmware version are not disclosed in the advisory, so any device that implements the described DSP service may be vulnerable. System administrators should verify whether their devices use the affected Snapdragon hardware.

The CVSS score of 7.8 indicates a high severity. No EPSS score is available, so the likelihood of exploitation is unknown. The vulnerability is not listed in the CISA KEV catalog. Attack feasibility depends on whether an attacker can trigger the FastRPC path on the device, which may require local or privilege exploitation. Nonetheless, the high CVSS suggests that an exploit, once discovered, could seriously affect device reliability or security.