CVE-2025-47381
Undergoing Analysis Undergoing Analysis - In Progress
Memory Corruption in IOCTL Handling Causes Concurrent Access Risk

Publication date: 2026-03-02

Last updated on: 2026-03-04

Assigner: Qualcomm, Inc.

Description
Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-02
Last Modified
2026-03-04
Generated
2026-06-16
AI Q&A
2026-03-02
EPSS Evaluated
2026-06-15
NVD
CVE-2025-47381
EUVD
EUVD-2025-208189
Affected Vendors & Products
Showing 25 associated CPEs
Vendor Product Version / Range
qualcomm lemans_au_lgit_firmware *
qualcomm lemansau_firmware *
qualcomm qam8255p_firmware *
qualcomm qamsrv1h_firmware *
qualcomm qamsrv1m_firmware *
qualcomm qca6574_firmware *
qualcomm qca6574a_firmware *
qualcomm qca6574au_firmware *
qualcomm qca6595_firmware *
qualcomm qca6595au_firmware *
qualcomm qca6688aq_firmware *
qualcomm qca6696_firmware *
qualcomm qca9367_firmware *
qualcomm qca9377_firmware *
qualcomm sa6155p_firmware *
qualcomm sa7255p_firmware *
qualcomm sa7775p_firmware *
qualcomm sa8155p_firmware *
qualcomm sa8195p_firmware *
qualcomm sa8255p_firmware *
qualcomm sa8620p_firmware *
qualcomm sa8770p_firmware *
qualcomm sa9000p_firmware *
qualcomm srv1h_firmware *
qualcomm srv1m_firmware *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-416 The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a memory corruption issue that occurs when processing IOCTL (Input Output Control) calls. It happens specifically when there is concurrent access to a shared buffer, leading to unsafe memory operations.

Impact Analysis

The vulnerability has a high impact on confidentiality, integrity, and availability, as indicated by its CVSS score. Exploiting this memory corruption could allow an attacker with limited privileges and local access to cause significant damage, such as unauthorized data access, data modification, or denial of service.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-47381. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart