CVE-2025-47396
Analyzed
Analyzed - Analysis Complete
BaseFortify
Publication date: 2026-01-07
Last updated on: 2026-01-27
Assigner: Qualcomm, Inc.
Description
Description
Memory corruption occurs when a secure application is launched on a device with insufficient memory.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| qualcomm | video_collaboration_vc1_platform | * |
| qualcomm | video_collaboration_vc3_platform_firmware | * |
| qualcomm | video_collaboration_vc3_platform | * |
| qualcomm | sm6475_firmware | * |
| qualcomm | sm6475 | * |
| qualcomm | sm7435_firmware | * |
| qualcomm | sm7435 | * |
| qualcomm | sm8735_firmware | * |
| qualcomm | sm8735 | * |
| qualcomm | sm8750_firmware | * |
| qualcomm | sm8750 | * |
| qualcomm | sm8750p_firmware | * |
| qualcomm | sm8750p | * |
| qualcomm | snapdragon_4_gen_2_mobile_platform_firmware | * |
| qualcomm | snapdragon_4_gen_2_mobile_platform | * |
| qualcomm | snapdragon_6_gen_1_mobile_platform_firmware | * |
| qualcomm | snapdragon_6_gen_1_mobile_platform | * |
| qualcomm | snapdragon_ar1_gen_1_platform_firmware | * |
| qualcomm | snapdragon_ar1_gen_1_platform | * |
| qualcomm | snapdragon_ar1_gen_1_platform_\luna1\_firmware | * |
| qualcomm | snapdragon_ar1_gen_1_platform_\luna1\ | * |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform_firmware | * |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform | * |
| qualcomm | sw5100_firmware | * |
| qualcomm | sw5100 | * |
| qualcomm | sw5100p_firmware | * |
| qualcomm | sw5100p | * |
| qualcomm | sxr2330p_firmware | * |
| qualcomm | sxr2330p | * |
| qualcomm | sxr2350p_firmware | * |
| qualcomm | sxr2350p | * |
| qualcomm | wcd9370_firmware | * |
| qualcomm | wcd9370 | * |
| qualcomm | wcd9375_firmware | * |
| qualcomm | wcd9375 | * |
| qualcomm | wcd9378_firmware | * |
| qualcomm | wcd9378 | * |
| qualcomm | wcd9380_firmware | * |
| qualcomm | wcd9380 | * |
| qualcomm | wcd9385_firmware | * |
| qualcomm | wcd9385 | * |
| qualcomm | wcd9395_firmware | * |
| qualcomm | wcd9395 | * |
| qualcomm | wcn3950_firmware | * |
| qualcomm | wcn3950 | * |
| qualcomm | wcn3980_firmware | * |
| qualcomm | wcn3980 | * |
| qualcomm | wcn3988_firmware | * |
| qualcomm | wcn3988 | * |
| qualcomm | wcn6755_firmware | * |
| qualcomm | wcn6755 | * |
| qualcomm | wcn7750_firmware | * |
| qualcomm | wcn7750 | * |
| qualcomm | wcn7860_firmware | * |
| qualcomm | wcn7860 | * |
| qualcomm | wcn7861_firmware | * |
| qualcomm | wcn7861 | * |
| qualcomm | wcn7880_firmware | * |
| qualcomm | wcn7880 | * |
| qualcomm | wcn7881_firmware | * |
| qualcomm | wcn7881 | * |
| qualcomm | wsa8810_firmware | * |
| qualcomm | wsa8810 | * |
| qualcomm | wsa8815_firmware | * |
| qualcomm | wsa8815 | * |
| qualcomm | wsa8830_firmware | * |
| qualcomm | wsa8830 | * |
| qualcomm | wsa8832_firmware | * |
| qualcomm | wsa8832 | * |
| qualcomm | wsa8835_firmware | * |
| qualcomm | wsa8835 | * |
| qualcomm | wsa8840_firmware | * |
| qualcomm | wsa8840 | * |
| qualcomm | wsa8845_firmware | * |
| qualcomm | wsa8845 | * |
| qualcomm | wsa8845h_firmware | * |
| qualcomm | wsa8845h | * |
| qualcomm | fastconnect_6200_firmware | * |
| qualcomm | fastconnect_6200 | * |
| qualcomm | fastconnect_6700_firmware | * |
| qualcomm | fastconnect_6700 | * |
| qualcomm | fastconnect_6900_firmware | * |
| qualcomm | fastconnect_6900 | * |
| qualcomm | fastconnect_7800_firmware | * |
| qualcomm | fastconnect_7800 | * |
| qualcomm | qcs610_firmware | * |
| qualcomm | qcs610 | * |
| qualcomm | qmp1000_firmware | * |
| qualcomm | qmp1000 | * |
| qualcomm | video_collaboration_vc1_platform_firmware | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-415 | The product calls free() twice on the same memory address. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a memory corruption issue that occurs when a secure application is launched on a device that does not have enough memory available.
How can this vulnerability impact me? :
The vulnerability can lead to high impact on confidentiality, integrity, and availability of the system, potentially allowing an attacker with limited privileges to exploit the memory corruption and cause serious damage.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70