CVE-2025-59603
HIGH
2026-03-02
[email protected]
7.8
CVSS 3.1
Share
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Lifecycle Timeline
2
Analysis Generated
Mar 12, 2026 - 21:55 vuln.today
CVE Published
Mar 02, 2026 - 17:16 nvd
HIGH 7.8
Tags
Memory Corruption
Sxr2250p Firmware
Xg101039 Firmware
Fastconnect 6900 Firmware
Sd865 5g Firmware
Qca0000 Firmware
Sc8380xp Firmware
Wsa8835 Firmware
Wsa8845h Firmware
Xg101002 Firmware
Wcd9380 Firmware
X2000092 Firmware
Snapdragon Xr2 5g Platform Firmware
X2000094 Firmware
Wsa8830 Firmware
Fastconnect 7800 Firmware
Sxr2230p Firmware
X2000090 Firmware
X2000077 Firmware
Wsa8815 Firmware
Xg101032 Firmware
Wsa8832 Firmware
Wsa8810 Firmware
Wcd9378c Firmware
Wsa8840 Firmware
Wcd9385 Firmware
Wsa8845 Firmware
X2000086 Firmware
Cologne Firmware
Description
Memory Corruption when processing invalid user address with nonstandard buffer address.
Analysis
Memory Corruption when processing invalid user address with nonstandard buffer address. [CVSS 7.8 HIGH]
Technical Context
Classified as CWE-787 (Out-of-bounds Write). Affects Sd865 5G Firmware. Memory Corruption when processing invalid user address with nonstandard buffer address.
Affected Products
Vendor: Qualcomm. Product: Sd865 5G Firmware. Versions: up to -.
Remediation
Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible.
Priority Score
39
Low
Medium
High
Critical
KEV: 0
EPSS: +0.0
CVSS: +39
POC: 0
Share
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).