A use‑after‑free bug in DSP_Services causes memory corruption while processing service requests, resulting in inconsistent memory state and unpredictable behavior. The vulnerability stems from an improper free of a memory region that can still be accessed, which typically provides an avenue for arbitrary code execution or privilege escalation, although the exact exploitation path is not specified in the description. Based on the typical impact of use‑after‑free flaws, it is inferred that an attacker could potentially inject or modify executable code that would be executed in the context of the affected process, but the extent of that impact remains uncertain because no exploitation guidance is given.

Qualcomm, Inc. Snapdragon devices are affected. No specific software or firmware versions are listed in the advisory, so all Snapdragon platforms that include DSP_Services may be vulnerable until an update is applied.

The CVSS score of 7.8 classifies the flaw as high severity, and the EPSS score is not available so the likelihood of exploitation cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. Attack vector details are absent from the advisory; likely exposure would occur via service requests to DSP_Services from a local or possibly network context, but this is inferred from the nature of the bug.