CVE-2025-47322
HIGH EPSS 0.4%
Published Dec 18, 20256mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
Published Dec 18, 2025 6mo ago
Last Modified Jun 17, 2026 1w ago
Description
Memory corruption while handling IOCTL calls to set mode.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
0.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-416 Use After Free Memory Safety
Affected Products 222
| Vendor | Product | Version | Range |
|---|---|---|---|
| qualcomm | ar8031_firmware | * | any |
| qualcomm | ar8031 | * | any |
| qualcomm | ar8035_firmware | * | any |
| qualcomm | ar8035 | * | any |
| qualcomm | csra6620_firmware | * | any |
| qualcomm | csra6620 | * | any |
| qualcomm | csra6640_firmware | * | any |
| qualcomm | csra6640 | * | any |
| qualcomm | fastconnect_6900_firmware | * | any |
| qualcomm | fastconnect_6900 | * | any |
| qualcomm | fastconnect_7800_firmware | * | any |
| qualcomm | fastconnect_7800 | * | any |
| qualcomm | flight_rb5_5g_platform_firmware | * | any |
| qualcomm | flight_rb5_5g_platform | * | any |
| qualcomm | qam8255p_firmware | * | any |
| qualcomm | qam8255p | * | any |
| qualcomm | qam8295p_firmware | * | any |
| qualcomm | qam8295p | * | any |
| qualcomm | qam8650p_firmware | * | any |
| qualcomm | qam8650p | * | any |
| qualcomm | qam8775p_firmware | * | any |
| qualcomm | qam8775p | * | any |
| qualcomm | qamsrv1h_firmware | * | any |
| qualcomm | qamsrv1h | * | any |
| qualcomm | qamsrv1m_firmware | * | any |
| qualcomm | qamsrv1m | * | any |
| qualcomm | qca2066_firmware | * | any |
| qualcomm | qca2066 | * | any |
| qualcomm | qca6174a_firmware | * | any |
| qualcomm | qca6174a | * | any |
| qualcomm | qca6391_firmware | * | any |
| qualcomm | qca6391 | * | any |
| qualcomm | qca6574_firmware | * | any |
| qualcomm | qca6574 | * | any |
| qualcomm | qca6574a_firmware | * | any |
| qualcomm | qca6574a | * | any |
| qualcomm | qca6574au_firmware | * | any |
| qualcomm | qca6574au | * | any |
| qualcomm | qca6584au_firmware | * | any |
| qualcomm | qca6584au | * | any |
| qualcomm | qca6595_firmware | * | any |
| qualcomm | qca6595 | * | any |
| qualcomm | qca6595au_firmware | * | any |
| qualcomm | qca6595au | * | any |
| qualcomm | qca6678aq_firmware | * | any |
| qualcomm | qca6678aq | * | any |
| qualcomm | qca6688aq_firmware | * | any |
| qualcomm | qca6688aq | * | any |
| qualcomm | qca6696_firmware | * | any |
| qualcomm | qca6696 | * | any |
| qualcomm | qca6698aq_firmware | * | any |
| qualcomm | qca6698aq | * | any |
| qualcomm | qca6797aq_firmware | * | any |
| qualcomm | qca6797aq | * | any |
| qualcomm | qca8081_firmware | * | any |
| qualcomm | qca8081 | * | any |
| qualcomm | qca8337_firmware | * | any |
| qualcomm | qca8337 | * | any |
| qualcomm | qcc710_firmware | * | any |
| qualcomm | qcc710 | * | any |
| qualcomm | qcm2290_firmware | * | any |
| qualcomm | qcm2290 | * | any |
| qualcomm | qcm6125_firmware | * | any |
| qualcomm | qcm6125 | * | any |
| qualcomm | qcm8550_firmware | * | any |
| qualcomm | qcm8550 | * | any |
| qualcomm | qcn6224_firmware | * | any |
| qualcomm | qcn6224 | * | any |
| qualcomm | qcn6274_firmware | * | any |
| qualcomm | qcn6274 | * | any |
| qualcomm | qcn9011_firmware | * | any |
| qualcomm | qcn9011 | * | any |
| qualcomm | qcn9012_firmware | * | any |
| qualcomm | qcn9012 | * | any |
| qualcomm | qcs2290_firmware | * | any |
| qualcomm | qcs2290 | * | any |
| qualcomm | qcs6125_firmware | * | any |
| qualcomm | qcs6125 | * | any |
| qualcomm | qcs7230_firmware | * | any |
| qualcomm | qcs7230 | * | any |
| qualcomm | qcs8250_firmware | * | any |
| qualcomm | qcs8250 | * | any |
| qualcomm | qcs8550_firmware | * | any |
| qualcomm | qcs8550 | * | any |
| qualcomm | qdu1010_firmware | * | any |
| qualcomm | qdu1010 | * | any |
| qualcomm | qdx1010_firmware | * | any |
| qualcomm | qdx1010 | * | any |
| qualcomm | qdx1011_firmware | * | any |
| qualcomm | qdx1011 | * | any |
| qualcomm | qep8111_firmware | * | any |
| qualcomm | qep8111 | * | any |
| qualcomm | qfw7114_firmware | * | any |
| qualcomm | qfw7114 | * | any |
| qualcomm | qfw7124_firmware | * | any |
| qualcomm | qfw7124 | * | any |
| qualcomm | qrb5165n_firmware | * | any |
| qualcomm | qrb5165n | * | any |
| qualcomm | video_collaboration_vc1_platform_firmware | * | any |
| qualcomm | video_collaboration_vc1_platform | * | any |
| qualcomm | video_collaboration_vc5_platform_firmware | * | any |
| qualcomm | video_collaboration_vc5_platform | * | any |
| qualcomm | robotics_rb5_platform_firmware | * | any |
| qualcomm | robotics_rb5_platform | * | any |
| qualcomm | sa6155p_firmware | * | any |
| qualcomm | sa6155p | * | any |
| qualcomm | sa7255p_firmware | * | any |
| qualcomm | sa7255p | * | any |
| qualcomm | sa7775p_firmware | * | any |
| qualcomm | sa7775p | * | any |
| qualcomm | sa8155p_firmware | * | any |
| qualcomm | sa8155p | * | any |
| qualcomm | sa8195p_firmware | * | any |
| qualcomm | sa8195p | * | any |
| qualcomm | sa8255p_firmware | * | any |
| qualcomm | sa8255p | * | any |
| qualcomm | sa8295p_firmware | * | any |
| qualcomm | sa8295p | * | any |
| qualcomm | sa8620p_firmware | * | any |
| qualcomm | sa8620p | * | any |
| qualcomm | sa8650p_firmware | * | any |
| qualcomm | sa8650p | * | any |
| qualcomm | sa8770p_firmware | * | any |
| qualcomm | sa8770p | * | any |
| qualcomm | sa8775p_firmware | * | any |
| qualcomm | sa8775p | * | any |
| qualcomm | sa9000p_firmware | * | any |
| qualcomm | sa9000p | * | any |
| qualcomm | sg4150p_firmware | * | any |
| qualcomm | sg4150p | * | any |
| qualcomm | sg8275_firmware | * | any |
| qualcomm | sg8275 | * | any |
| qualcomm | sg8275p_firmware | * | any |
| qualcomm | sg8275p | * | any |
| qualcomm | sm7550_firmware | * | any |
| qualcomm | sm7550 | * | any |
| qualcomm | sm7550p_firmware | * | any |
| qualcomm | sm7550p | * | any |
| qualcomm | sm8550p_firmware | * | any |
| qualcomm | sm8550p | * | any |
| qualcomm | smart_audio_400_platform_firmware | * | any |
| qualcomm | smart_audio_400_platform | * | any |
| qualcomm | snapdragon_460_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_460_mobile_platform | * | any |
| qualcomm | snapdragon_662_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_662_mobile_platform | * | any |
| qualcomm | snapdragon_680_4g_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_680_4g_mobile_platform | * | any |
| qualcomm | snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware | * | any |
| qualcomm | snapdragon_685_4g_mobile_platform_\(sm6225-ad\) | * | any |
| qualcomm | snapdragon_8_gen_2_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_8_gen_2_mobile_platform | * | any |
| qualcomm | snapdragon_8\+_gen_2_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_8\+_gen_2_mobile_platform | * | any |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2_firmware | * | any |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2 | * | any |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform_firmware | * | any |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform | * | any |
| qualcomm | snapdragon_x32_5g_modem-rf_system_firmware | * | any |
| qualcomm | snapdragon_x32_5g_modem-rf_system | * | any |
| qualcomm | snapdragon_x35_5g_modem-rf_system_firmware | * | any |
| qualcomm | snapdragon_x35_5g_modem-rf_system | * | any |
| qualcomm | snapdragon_x72_5g_modem-rf_system_firmware | * | any |
| qualcomm | snapdragon_x72_5g_modem-rf_system | * | any |
| qualcomm | snapdragon_x75_5g_modem-rf_system_firmware | * | any |
| qualcomm | snapdragon_x75_5g_modem-rf_system | * | any |
| qualcomm | srv1h_firmware | * | any |
| qualcomm | srv1h | * | any |
| qualcomm | srv1m_firmware | * | any |
| qualcomm | srv1m | * | any |
| qualcomm | sw5100_firmware | * | any |
| qualcomm | sw5100 | * | any |
| qualcomm | sw5100p_firmware | * | any |
| qualcomm | sw5100p | * | any |
| qualcomm | wcd9335_firmware | * | any |
| qualcomm | wcd9335 | * | any |
| qualcomm | wcd9340_firmware | * | any |
| qualcomm | wcd9340 | * | any |
| qualcomm | wcd9370_firmware | * | any |
| qualcomm | wcd9370 | * | any |
| qualcomm | wcd9371_firmware | * | any |
| qualcomm | wcd9371 | * | any |
| qualcomm | wcd9375_firmware | * | any |
| qualcomm | wcd9375 | * | any |
| qualcomm | wcd9378_firmware | * | any |
| qualcomm | wcd9378 | * | any |
| qualcomm | wcd9380_firmware | * | any |
| qualcomm | wcd9380 | * | any |
| qualcomm | wcd9385_firmware | * | any |
| qualcomm | wcd9385 | * | any |
| qualcomm | wcd9390_firmware | * | any |
| qualcomm | wcd9390 | * | any |
| qualcomm | wcd9395_firmware | * | any |
| qualcomm | wcd9395 | * | any |
| qualcomm | wcn3910_firmware | * | any |
| qualcomm | wcn3910 | * | any |
| qualcomm | wcn3950_firmware | * | any |
| qualcomm | wcn3950 | * | any |
| qualcomm | wcn3980_firmware | * | any |
| qualcomm | wcn3980 | * | any |
| qualcomm | wcn3988_firmware | * | any |
| qualcomm | wcn3988 | * | any |
| qualcomm | wcn6650_firmware | * | any |
| qualcomm | wcn6650 | * | any |
| qualcomm | wcn6755_firmware | * | any |
| qualcomm | wcn6755 | * | any |
| qualcomm | wsa8810_firmware | * | any |
| qualcomm | wsa8810 | * | any |
| qualcomm | wsa8815_firmware | * | any |
| qualcomm | wsa8815 | * | any |
| qualcomm | wsa8830_firmware | * | any |
| qualcomm | wsa8830 | * | any |
| qualcomm | wsa8832_firmware | * | any |
| qualcomm | wsa8832 | * | any |
| qualcomm | wsa8835_firmware | * | any |
| qualcomm | wsa8835 | * | any |
| qualcomm | wsa8840_firmware | * | any |
| qualcomm | wsa8840 | * | any |
| qualcomm | wsa8845_firmware | * | any |
| qualcomm | wsa8845 | * | any |
| qualcomm | wsa8845h_firmware | * | any |
| qualcomm | wsa8845h | * | any |
References 1
- docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html
Remediation
- docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html