CVE-2025-47368

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.09% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-25)

CWE

CWE-126

Published

2025-11-04

Modified

2026-10-18

Record from

the NVD, synced 2026-10-19

Affected

• qualcomm:fastconnect_6900_firmware
• qualcomm:fastconnect_7800_firmware
• qualcomm:sc8380xp_firmware
• qualcomm:wcd9380_firmware
• qualcomm:wcd9385_firmware
• qualcomm:wsa8840_firmware
• qualcomm:wsa8845_firmware
• qualcomm:wsa8845h_firmware

References

• https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html

Check your stackJSON