First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-59603

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory Corruption when processing invalid user address with nonstandard buffer address.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	Cologne; FastConnect 6900; FastConnect 7800; QCA0000; SC8380XP; SD865 5G; Snapdragon XR2 5G Platform; Snapdragon XR2+ Gen 1 Platform; SXR2230P; SXR2250P; WCD9378C; WCD9380; WCD9385; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bulletin.htmlVendor Advisory

Timeline

Published: Mar 2, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-596047.8Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.CVE-2025-596057.8Memory Corruption when processing device identifier strings that exceed the expected maximum length.CVE-2025-596067.8Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.CVE-2025-596077.8Memory Corruption when copying large input data exceeds normal allocation limits.CVE-2025-596095.5Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.CVE-2025-59617.2The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file CVE-2025-596106.4Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.CVE-2025-596116.7Memory corruption in diagnostic services due to absence of input validation CVE-2025-596126.7Memory corruption in windows drivers while sending incorrect trusted application request CVE-2025-596136.7Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.CVE-2025-596146.7Memory Corruption when sending random number generator command with insufficient output buffer size.CVE-2025-596157.8Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper s

CVE-2025-59603: High severity, CVSS 7.8 | Vulnix