עברית

Vulnerability Intelligence

CVE-2025-59606

High 7.8

Published
Last modified
NVD status
Analyzed

Description

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.

Affected products

qualcomm: cologne firmware; qualcomm: cologne; qualcomm: cq7790 firmware; qualcomm: cq7790; qualcomm: cq8725s firmware; qualcomm: cq8725s; qualcomm: cq8750m firmware; qualcomm: cq8750m; qualcomm: fastconnect 6200 firmware; qualcomm: fastconnect 6200; qualcomm: wsa8840 firmware; qualcomm: wsa8840; qualcomm: wsa8845 firmware; qualcomm: wsa8845; qualcomm: wsa8845h firmware

References1

Metrics

CVSS 3.1
7.8 HIGH Score source: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
0% percentile: 0 · as of 15 November 2026
CWE
CWE-476

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.