Back to the CVE list
CVE-2025-59615

Use after free in Qualcomm Fastconnect 6700 Firmware

CVSS score

7.8

EPSS probability

%0.1

Risk score

0.0

Published

3 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2025-59615 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2025-59615 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1qualcommfastconnect 6700 firmware View
2qualcommfastconnect 6700 View
3qualcommfastconnect 6900 firmware View
4qualcommfastconnect 6900 View
5qualcommfastconnect 7800 firmware View
6qualcommfastconnect 7800 View
7qualcommmolokai firmware View
8qualcommmolokai View
9qualcommorne firmware View
10qualcommorne View
11qualcommpandeiro firmware View
12qualcommpandeiro View
13qualcommqcm5430 firmware View
14qualcommqcm5430 View
15qualcommqcm6490 firmware View
16qualcommqcm6490 View
17qualcommqln1083bd firmware View
18qualcommqln1083bd View
19qualcommqln1086bd firmware View
20qualcommqln1086bd View
21qualcommqmp1000 firmware View
22qualcommqmp1000 View
23qualcommqmp2001 firmware View
24qualcommqmp2001 View
25qualcommqpa1083bd firmware View
26qualcommqpa1083bd View
27qualcommqpa1086bd firmware View
28qualcommqpa1086bd View
29qualcommvideo collaboration vc3 platform firmware View
30qualcommvideo collaboration vc3 platform View
31qualcommqxm1093 firmware View
32qualcommqxm1093 View
33qualcommqxm1094 firmware View
34qualcommqxm1094 View
35qualcommqxm1095 firmware View
36qualcommqxm1095 View
37qualcommqxm1096 firmware View
38qualcommqxm1096 View
39qualcommsc8380xp firmware View
40qualcommsc8380xp View
41qualcommsd865 5g firmware View
42qualcommsd865 5g View
43qualcommsm6850 firmware View
44qualcommsm6850 View
45qualcommsm8845p firmware View
46qualcommsm8845p View
47qualcommsnapdragon 460 mobile platform firmware View
48qualcommsnapdragon 460 mobile platform View
49qualcommsnapdragon 662 mobile platform firmware View
50qualcommsnapdragon 662 mobile platform View
51qualcommsnapdragon 8 elite gen 5 firmware View
52qualcommsnapdragon 8 elite gen 5 View
53qualcommsnapdragon ar1 gen 1 platform firmware View
54qualcommsnapdragon ar1 gen 1 platform View
55qualcommsnapdragon xr2 5g platform firmware View
56qualcommsnapdragon xr2 5g platform View
57qualcommsnapdragon xr2+ gen 1 platform firmware View
58qualcommsnapdragon xr2+ gen 1 platform View
59qualcommsxr2230p firmware View
60qualcommsxr2230p View
61qualcommsxr2250p firmware View
62qualcommsxr2250p View
63qualcommsxr2330p firmware View
64qualcommsxr2330p View
65qualcommsxr2350p firmware View
66qualcommsxr2350p View
67qualcommwcd9370 firmware View
68qualcommwcd9370 View
69qualcommwcd9375 firmware View
70qualcommwcd9375 View
71qualcommwcd9378 firmware View
72qualcommwcd9378 View
73qualcommwcd9380 firmware View
74qualcommwcd9380 View
75qualcommwcd9385 firmware View
76qualcommwcd9385 View
77qualcommwcd9395 firmware View
78qualcommwcd9395 View
79qualcommwcn3950 firmware View
80qualcommwcn3950 View
81qualcommwcn3988 firmware View
82qualcommwcn3988 View
83qualcommwcn6450 firmware View
84qualcommwcn6450 View
85qualcommwcn7760 firmware View
86qualcommwcn7760 View
87qualcommwcn7860 firmware View
88qualcommwcn7860 View
89qualcommwcn7861 firmware View
90qualcommwcn7861 View
91qualcommwcn7880 firmware View
92qualcommwcn7880 View
93qualcommwcn7881 firmware View
94qualcommwcn7881 View
95qualcommwsa8810 firmware View
96qualcommwsa8810 View
97qualcommwsa8815 firmware View
98qualcommwsa8815 View
99qualcommwsa8830 firmware View
100qualcommwsa8830 View
101qualcommwsa8832 firmware View
102qualcommwsa8832 View
103qualcommwsa8835 firmware View
104qualcommwsa8835 View
105qualcommwsa8840 firmware View
106qualcommwsa8840 View
107qualcommwsa8845 firmware View
108qualcommwsa8845 View
109qualcommwsa8845h firmware View
110qualcommwsa8845h View
111qualcommwsa8850 firmware View
112qualcommwsa8850 View
113qualcommwsa8850w firmware View
114qualcommwsa8850w View
115qualcommwsa8855c firmware View
116qualcommwsa8855c View
117qualcommxrv7209 firmware View
118qualcommxrv7209 View
119qualcommxrv9209 firmware View
120qualcommxrv9209 View
Total affected vendors: 1|Products: 120

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.8CVSS V31HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD
6.6CVSS V31MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:LNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

2 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
reference

Yama veya çözüm referansı

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-59615 is associated with the following CWEs:

CWE-416: Use After Free

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-59615 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.htmlpatch

CVSS Vector Radar Chart

7.8 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama doğrulandı

2 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

Q
qualcomm logo
qualcomm

Weakness Type (CWE & CAPEC)

CWE-416

Similar Vulnerabilities

6.5
CVE-2020-3702Vulnerability in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking
QI
Qualcomm, Inc. logo
VendorQualcomm, Inc.ProductSnapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking+27 etkilenen
Patch status unknownEPSS %06 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-59615"