CVE-2025-47358
7.8 highEPSS 0.1%
High (7.8) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.
Severity
CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:qcc2072_firmware
- qualcomm:sc8380xp_firmware
- qualcomm:snapdragon_8cx_gen_3_compute_platform_firmware
- qualcomm:wcd9378c_firmware
- qualcomm:wcd9380_firmware
- qualcomm:wcd9385_firmware
- qualcomm:wsa8830_firmware
- qualcomm:wsa8835_firmware
- qualcomm:wsa8840_firmware
- qualcomm:wsa8845_firmware
- qualcomm:wsa8845h_firmware
- qualcomm:x2000077_firmware
- qualcomm:x2000086_firmware
- qualcomm:x2000090_firmware
- qualcomm:x2000092_firmware
- qualcomm:x2000094_firmware
- qualcomm:xg101002_firmware
- qualcomm:xg101032_firmware
- qualcomm:xg101039_firmware
References
Check your stackJSON