CVE-2025-47374

This vulnerability stems from a use-after-free condition (CWE-416) in Qualcomm Snapdragon's memory management subsystem, specifically in the interaction between fence (synchronization primitive) deregistration logic and signal handling routines. The root cause involves improper synchronization or timing of memory deallocation-a fence object is freed while signal handlers or concurrent deregistration code paths still hold references to it. When the freed memory is subsequently accessed, it may contain attacker-controlled or uninitialized data, leading to potential code execution or data corruption. The vulnerability is classified under memory corruption and buffer overflow categories, indicating that the use-after-free may enable writing beyond intended boundaries or executing arbitrary instructions within the same process context.