CVE-2025-59607
Untrusted Pointer Dereference in Windows Compute
Memory Corruption when copying large input data exceeds normal allocation limits.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Untrusted Pointer Dereference in Windows Compute
Memory Corruption when copying large input data exceeds normal allocation limits.
- Record
CVE-2025-59607- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-822
- Updated
- 2026-11-02
EUVDEUVD-2025-210926
Memory Corruption when copying large input data exceeds normal allocation limits.
- Record
EUVD-2025-210926- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-xvhf-gc4w-vcvc
Memory Corruption when copying large input data exceeds normal allocation limits.
Memory Corruption when copying large input data exceeds normal allocation limits.
- Record
GHSA-xvhf-gc4w-vcvc- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-822
- Updated
- 2026-11-02
NVD
Memory Corruption when copying large input data exceeds normal allocation limits.
- Record
CVE-2025-59607- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-822
- Updated
- 2026-11-02
Affected products
- qualcomm cologne firmware
- qualcomm fastconnect 6900 firmware
- qualcomm fastconnect 7800 firmware
- qualcomm sc8380xp firmware
- qualcomm snapdragon 8cx gen 3 compute platform firmware
- qualcomm snapdragon x2 elite firmware
- qualcomm wcd9378c firmware
- qualcomm wcd9380 firmware
- qualcomm wcd9385 firmware
- qualcomm wsa8830 firmware
- qualcomm wsa8835 firmware
- qualcomm wsa8840 firmware
Show 3 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-59607 is a high vulnerability (CVSS 7.8) in Qualcomm Cologne Firmware, published September 17, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.10%, the 0th percentile. No source names a fixed version.