CVE-2025-47316
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-09-24
Last updated on: 2025-09-25
Assigner: Qualcomm, Inc.
Description
Description
Memory corruption due to double free when multiple threads race to set the timestamp store.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| qualcomm | aqt1000_firmware | * |
| qualcomm | aqt1000 | * |
| qualcomm | fastconnect_6200_firmware | * |
| qualcomm | fastconnect_6200 | * |
| qualcomm | fastconnect_6700_firmware | * |
| qualcomm | fastconnect_6700 | * |
| qualcomm | fastconnect_6800_firmware | * |
| qualcomm | fastconnect_6800 | * |
| qualcomm | fastconnect_6900_firmware | * |
| qualcomm | fastconnect_6900 | * |
| qualcomm | fastconnect_7800_firmware | * |
| qualcomm | fastconnect_7800 | * |
| qualcomm | qca6391_firmware | * |
| qualcomm | qca6391 | * |
| qualcomm | qca6420_firmware | * |
| qualcomm | qca6420 | * |
| qualcomm | qca6430_firmware | * |
| qualcomm | qca6430 | * |
| qualcomm | sc8380xp_firmware | * |
| qualcomm | sc8380xp | * |
| qualcomm | snapdragon_7c\+_gen_3_compute_firmware | * |
| qualcomm | snapdragon_7c\+_gen_3_compute | * |
| qualcomm | snapdragon_8c_compute_platform_\(sc8180x-ad\)_firmware | * |
| qualcomm | snapdragon_8c_compute_platform_\(sc8180x-ad\) | * |
| qualcomm | snapdragon_8cx_compute_platform_\(sc8180x-aa\)_firmware | * |
| qualcomm | snapdragon_8cx_compute_platform_\(sc8180x-aa\) | * |
| qualcomm | snapdragon_8cx_compute_platform_\(sc8180x-ab\)_firmware | * |
| qualcomm | snapdragon_8cx_compute_platform_\(sc8180x-ab\) | * |
| qualcomm | snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\)_firmware | * |
| qualcomm | snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\) | * |
| qualcomm | snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-af\)_firmware | * |
| qualcomm | snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-af\) | * |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware | * |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\) | * |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware | * |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\) | * |
| qualcomm | wcd9340_firmware | * |
| qualcomm | wcd9340 | * |
| qualcomm | wcd9341_firmware | * |
| qualcomm | wcd9341 | * |
| qualcomm | wcd9380_firmware | * |
| qualcomm | wcd9380 | * |
| qualcomm | wcd9385_firmware | * |
| qualcomm | wcd9385 | * |
| qualcomm | wsa8810_firmware | * |
| qualcomm | wsa8810 | * |
| qualcomm | wsa8815_firmware | * |
| qualcomm | wsa8815 | * |
| qualcomm | wsa8830_firmware | * |
| qualcomm | wsa8830 | * |
| qualcomm | wsa8835_firmware | * |
| qualcomm | wsa8835 | * |
| qualcomm | wsa8840_firmware | * |
| qualcomm | wsa8840 | * |
| qualcomm | wsa8845_firmware | * |
| qualcomm | wsa8845 | * |
| qualcomm | wsa8845h_firmware | * |
| qualcomm | wsa8845h | * |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-415 | The product calls free() twice on the same memory address. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a memory corruption issue caused by a double free error that occurs when multiple threads simultaneously attempt to set the timestamp store, leading to unsafe memory operations.
How can this vulnerability impact me? :
The vulnerability can lead to severe impacts including high confidentiality, integrity, and availability risks, potentially allowing attackers to corrupt memory, cause crashes, or execute arbitrary code.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70