alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2025-47212 (published 2025-10-03)
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands.

We have already fixed the vulnerability in the following versions:
QTS 5.2.6.3195 build 20250715 and later
QuTS hero h5.2.6.3195 build 20250715 and later
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: qnap
Affected products: qts, quts_hero
CVE-2025-47213 (published 2025-10-03)
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.

We have already fixed the vulnerability in the following versions:
QTS 5.2.6.3195 build 20250715 and later
QuTS hero h5.2.6.3195 build 20250715 and later
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qnap
Affected products: qts, quts_hero
CVE-2025-47214 (published 2025-10-03)
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.

We have already fixed the vulnerability in the following versions:
QTS 5.2.6.3195 build 20250715 and later
  and later
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qnap
Affected products: qts, quts_hero
CVE-2025-47219 (published 2025-08-07)
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: gstreamer
Affected products: gstreamer
CVE-2025-47220 (published 2025-11-13)
A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLE_SIGNATURE_CUSTOM_IMAGE_PATH, which exists in the PDFSigner and the PAdESSigner, can be set to any path without any restrictions by an admin user. In the case that the provided path points to an existing file, readable by the user running the application server, but is not a recognized image format, it will return this as an error to the clientside, confirming the existences of the file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-284
Affected vendors: keyfactor
Affected products: signserver
CVE-2025-47221 (published 2025-11-13)
An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2. The properties ARCHIVETODISK_FILENAME-PATTERN, ARCHIVETODISK_PATH_BASE, ARCHIVETODISK_PATH_PATTERN can be set to any path, even ones that will point to files that already exist. This vulnerability gives a user with admin access the possibility to write files in arbitrary directories in the server file system and potentially overwrite files accessible by the local user JBoss.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-284
Affected vendors: keyfactor
Affected products: signserver
CVE-2025-47222 (published 2025-11-13)
A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2. Setting any chosen class name to any of the properties requiring a class path and the provided class is not expected to return different errors if the class exists in deployment or not. This returns information about the classes loaded in the application or not to the clientside.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Weakness: CWE-284
Affected vendors: keyfactor
Affected products: signserver
CVE-2025-47227 (published 2025-07-05)
In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled. Making both a GET and a POST request to login.php.is sufficient. An unauthenticated attacker can then bypass authentication via administrator account takeover.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-684
CVE-2025-47228 (published 2025-07-05)
In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute system commands via crafted HTTP requests.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L)
Weakness: CWE-78
CVE-2025-47281 (published 2025-07-23)
Kyverno is a policy engine designed for cloud native platform engineering teams. In versions 1.14.1 and below, a Denial of Service (DoS) vulnerability exists due to improper handling of JMESPath variable substitutions. Attackers with permissions to create or update Kyverno policies can craft expressions using the {{@}} variable combined with a pipe and an invalid JMESPath function (e.g., {{@ | non_existent_function }}). This leads to a nil value being substituted into the policy structure. Subsequent processing by internal functions, specifically getValueAsStringMap, which expect string values, results in a panic due to a type assertion failure (interface {} is nil, not string). This crashes Kyverno worker threads in the admission controller and causes continuous crashes of the reports controller pod. This is fixed in version 1.14.2.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: kyverno
Affected products: kyverno
CVE-2025-47286 (published 2025-11-10)
Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, an administrator can, by editing the configuration of the iTop instance, execute code on the server. Versions 2.7.13 and 3.2.2 escape and check the config parameter before executing a command based on it.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-74
Affected vendors: combodo
Affected products: itop
CVE-2025-47314 (published 2025-09-24)
Memory corruption while processing data sent by FE driver.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6574au, qca6574au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6688aq, qca6688aq_firmware, qca6696, qca6696_firmware, qca6698aq
CVE-2025-47315 (published 2025-09-24)
Memory corruption while handling repeated memory unmap requests from guest VM.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6574au, qca6574au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6688aq, qca6688aq_firmware, qca6696, qca6696_firmware, qca6698aq
CVE-2025-47316 (published 2025-09-24)
Memory corruption due to double free when multiple threads race to set the timestamp store.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-415
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, sc8380xp, sc8380xp_firmware, snapdragon_7c\+_gen_3_compute, snapdragon_7c\+_gen_3_compute_firmware, snapdragon_8c_compute_platform_\(sc8180x-ad\), snapdragon_8c_compute_platform_\(sc8180x-ad\)_firmware, snapdragon_8cx_compute_platform_\(sc8180x-aa\)
CVE-2025-47317 (published 2025-09-24)
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_7800, fastconnect_7800_firmware, qcc5161, qcc5161_firmware, qcc710, qcc710_firmware, qcc711, qcc711_firmware, qcc7225, qcc7225_firmware, qcc7226, qcc7226_firmware, qcc7228, qcc7228_firmware, qmp1000, qmp1000_firmware, s3_gen_2_sound_platform, s3_gen_2_sound_platform_firmware, s3_sound_platform, s3_sound_platform_firmware, s5_gen_2_sound_platform
CVE-2025-47318 (published 2025-09-24)
Transient DOS while parsing the EPTM test control message to get the test pattern.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: apq8017, apq8017_firmware, apq8064au, apq8064au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800
CVE-2025-47319 (published 2025-12-18)
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N)
Weakness: CWE-497
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6174a
CVE-2025-47320 (published 2025-12-18)
Memory corruption while processing MFC channel configuration during music playback.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: 9206_lte_modem, 9206_lte_modem_firmware, apq8017, apq8017_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, c-v2x_9150, c-v2x_9150_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900
CVE-2025-47321 (published 2025-12-18)
Memory corruption while copying packets received from unix clients.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qam8255p, qam8255p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m
CVE-2025-47322 (published 2025-12-18)
Memory corruption while handling IOCTL calls to set mode.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, flight_rb5_5g_platform, flight_rb5_5g_platform_firmware, qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m
CVE-2025-47323 (published 2025-12-18)
Memory corruption while routing GPR packets between user and root when handling large data packet.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h
CVE-2025-47324 (published 2025-08-06)
Information disclosure while accessing and modifying the PIB file of a remote device via powerline.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-1230
Affected vendors: qualcomm
Affected products: qca7005, qca7005_firmware
CVE-2025-47325 (published 2025-12-18)
Information disclosure while processing system calls with invalid parameters.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-822
Affected vendors: qualcomm
Affected products: csr8811, csr8811_firmware, ipq8070, ipq8070_firmware, ipq8070a, ipq8070a_firmware, ipq8071, ipq8071_firmware, ipq8071a, ipq8071a_firmware, ipq8072, ipq8072_firmware, ipq8072a, ipq8072a_firmware, ipq8074, ipq8074_firmware, ipq8074a, ipq8074a_firmware, ipq8076, ipq8076_firmware, ipq8076a, ipq8076a_firmware, ipq8078, ipq8078_firmware, ipq8078a
CVE-2025-47326 (published 2025-09-24)
Transient DOS while handling command data during power control processing.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, csr8811, csr8811_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, immersive_home_214_platform, immersive_home_214_platform_firmware, immersive_home_216_platform, immersive_home_216_platform_firmware, immersive_home_316_platform, immersive_home_316_platform_firmware, immersive_home_318_platform, immersive_home_318_platform_firmware, immersive_home_3210_platform, immersive_home_3210_platform_firmware, immersive_home_326_platform, immersive_home_326_platform_firmware, ipq5010, ipq5010_firmware, ipq5028, ipq5028_firmware, ipq5300
CVE-2025-47327 (published 2025-09-24)
Memory corruption while encoding the image data.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, qcm5430, qcm5430_firmware, qcm6490, qcm6490_firmware, qcs5430, qcs5430_firmware, qcs6490
CVE-2025-47328 (published 2025-09-24)
Transient DOS while processing power control requests with invalid antenna or stream values.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: fastconnect_7800, fastconnect_7800_firmware, immersive_home_3210_platform, immersive_home_3210_platform_firmware, immersive_home_326_platform, immersive_home_326_platform_firmware, ipq5300, ipq5300_firmware, ipq5302, ipq5302_firmware, ipq5312, ipq5312_firmware, ipq5332, ipq5332_firmware, ipq5424, ipq5424_firmware, ipq9008, ipq9008_firmware, ipq9048, ipq9048_firmware, ipq9554, ipq9554_firmware, ipq9570, ipq9570_firmware, ipq9574
CVE-2025-47329 (published 2025-09-24)
Memory corruption while handling invalid inputs in application info setup.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-763
Affected vendors: qualcomm
Affected products: fastconnect_7800, fastconnect_7800_firmware, qam8255p, qam8255p_firmware, qam8775p, qam8775p_firmware, qca6574, qca6574_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qcm6690, qcm6690_firmware, qcs6690, qcs6690_firmware, sa6155p, sa6155p_firmware, sa8155p
CVE-2025-47330 (published 2026-01-07)
Transient DOS while parsing video packets received from the video firmware.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, ar8035, ar8035_firmware, c-v2x_9150, c-v2x_9150_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, flight_rb5_5g_platform, flight_rb5_5g_platform_firmware, mdm9628, mdm9628_firmware, qam8255p
CVE-2025-47331 (published 2026-01-07)
Information disclosure while processing a firmware event.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, ar8035, ar8035_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, flight_rb5_5g_platform, flight_rb5_5g_platform_firmware, fsm10056, fsm10056_firmware, fsm20055
CVE-2025-47332 (published 2026-01-07)
Memory corruption while processing a config call from userspace.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: qualcomm
Affected products: fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qca6698au, qca6698au_firmware, qca6797aq, qca6797aq_firmware, qcm4490, qcm4490_firmware, qcm8550, qcm8550_firmware, qcs4490, qcs4490_firmware, qcs8550, qcs8550_firmware, qmp1000, qmp1000_firmware, sg8275, sg8275_firmware, sg8275p
CVE-2025-47333 (published 2026-01-07)
Memory corruption while handling buffer mapping operations in the cryptographic driver.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, c-v2x_9150, c-v2x_9150_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, flight_rb5_5g_platform
CVE-2025-47334 (published 2026-01-07)
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: csra6620, csra6620_firmware, csra6640, csra6640_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, flight_rb5_5g_platform, flight_rb5_5g_platform_firmware, qam8255p, qam8255p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6391
CVE-2025-47335 (published 2026-01-07)
Memory corruption while parsing clock configuration data for a specific hardware type.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qca6698aq, qca6698aq_firmware, qcm5430, qcm5430_firmware, qcm6490, qcm6490_firmware, qcs5430, qcs5430_firmware, qcs615, qcs615_firmware, qcs6490, qcs6490_firmware, qcs9100, qcs9100_firmware, qmp1000, qmp1000_firmware, sm6650, sm6650_firmware, sm6650p
CVE-2025-47336 (published 2026-01-07)
Memory corruption while performing sensor register read operations.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: fastconnect_7800, fastconnect_7800_firmware, qmp1000, qmp1000_firmware, sm8735, sm8735_firmware, sm8750, sm8750_firmware, sm8750p, sm8750p_firmware, wcd9378, wcd9378_firmware, wcd9395, wcd9395_firmware, wcn7750, wcn7750_firmware, wcn7860, wcn7860_firmware, wcn7861, wcn7861_firmware, wcn7880, wcn7880_firmware, wcn7881, wcn7881_firmware, wsa8830
CVE-2025-47337 (published 2026-01-07)
Memory corruption while accessing a synchronization object during concurrent operations.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qca6391, qca6391_firmware, qca6698aq, qca6698aq_firmware, qca6698au, qca6698au_firmware, qca6797aq, qca6797aq_firmware, qcm5430, qcm5430_firmware, qcm6490, qcm6490_firmware, qcm8550, qcm8550_firmware, qcn9011, qcn9011_firmware, qcn9012, qcn9012_firmware, qcs5430
CVE-2025-47338 (published 2025-10-09)
Memory corruption while processing escape commands from userspace.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-822
Affected vendors: qualcomm
Affected products: fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qcc2072, qcc2072_firmware, sc8380xp, sc8380xp_firmware, wcd9378c, wcd9378c_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wsa8840, wsa8840_firmware, wsa8845, wsa8845_firmware, wsa8845h, wsa8845h_firmware, x2000077, x2000077_firmware, x2000086, x2000086_firmware, x2000090
CVE-2025-47339 (published 2026-01-07)
Memory corruption while deinitializing a HDCP session.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, immersive_home_214_platform, immersive_home_214_platform_firmware, immersive_home_216_platform, immersive_home_216_platform_firmware, immersive_home_316_platform, immersive_home_316_platform_firmware, immersive_home_318_platform, immersive_home_318_platform_firmware, ipq4018, ipq4018_firmware, ipq4019
CVE-2025-47340 (published 2025-10-09)
Memory corruption while processing IOCTL call to get the mapping.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qcc2072, qcc2072_firmware, sc8380xp, sc8380xp_firmware, wcd9378c, wcd9378c_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wsa8840, wsa8840_firmware, wsa8845, wsa8845_firmware, wsa8845h, wsa8845h_firmware, x2000077, x2000077_firmware, x2000086, x2000086_firmware, x2000090
CVE-2025-47341 (published 2025-10-09)
memory corruption while processing an image encoding completion event.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qcc2072, qcc2072_firmware, qcm5430, qcm5430_firmware, qcm6490, qcm6490_firmware, qcs5430, qcs5430_firmware, qcs6490, qcs6490_firmware, sc8380xp, sc8380xp_firmware, snapdragon_7c\+_gen_3_compute, snapdragon_7c\+_gen_3_compute_firmware, snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\), snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware, snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\), snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware, video_collaboration_vc3_platform
CVE-2025-47342 (published 2025-10-09)
Transient DOS may occur when multi-profile concurrency arises with QHS enabled.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: qcc5161, qcc5161_firmware, qcc7225, qcc7225_firmware, qcc7226, qcc7226_firmware, qcc7228, qcc7228_firmware, s3_gen_2_sound_platform, s3_gen_2_sound_platform_firmware, s3_sound_platform, s3_sound_platform_firmware, s5_gen_2_sound_platform, s5_gen_2_sound_platform_firmware, s5_sound_platform, s5_sound_platform_firmware
CVE-2025-47343 (published 2026-01-07)
Memory corruption while processing a video session to set video parameters.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-822
Affected vendors: qualcomm
Affected products: cologne, cologne_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qca0000, qca0000_firmware, qcm5430, qcm5430_firmware, qcm6490, qcm6490_firmware, sc8380xp, sc8380xp_firmware, video_collaboration_vc3_platform, video_collaboration_vc3_platform_firmware, wcd9370, wcd9370_firmware, wcd9375, wcd9375_firmware, wcd9378c, wcd9378c_firmware, wcd9380
CVE-2025-47344 (published 2026-01-07)
Memory corruption while handling sensor utility operations.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: qualcomm
Affected products: csra6620, csra6620_firmware, csra6640, csra6640_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qca6574, qca6574_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qca6698aq, qca6698aq_firmware, qcm4490
CVE-2025-47345 (published 2026-01-07)
Cryptographic issue may occur while encrypting license data.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N)
Weakness: CWE-323
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6174a
CVE-2025-47346 (published 2026-01-07)
Memory corruption while processing a secure logging command in the trusted application.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6174a
CVE-2025-47347 (published 2025-10-09)
Memory corruption while processing control commands in the virtual memory management interface.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: qualcomm
Affected products: qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6688aq, qca6688aq_firmware, qca6696
CVE-2025-47348 (published 2026-01-07)
Memory corruption while processing identity credential operations in the trusted application.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-457
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p
CVE-2025-47349 (published 2025-10-09)
Memory corruption while processing an escape call.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-823
Affected vendors: qualcomm
Affected products: fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qcc2072, qcc2072_firmware, sc8380xp, sc8380xp_firmware, wcd9378c, wcd9378c_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wsa8840, wsa8840_firmware, wsa8845, wsa8845_firmware, wsa8845h, wsa8845h_firmware, x2000077, x2000077_firmware, x2000086, x2000086_firmware, x2000090
CVE-2025-47350 (published 2025-12-18)
Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qca0000, qca0000_firmware, sc8380xp, sc8380xp_firmware, wcd9378c, wcd9378c_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wsa8840, wsa8840_firmware, wsa8845, wsa8845_firmware, wsa8845h, wsa8845h_firmware, x2000077, x2000077_firmware, x2000086, x2000086_firmware, x2000090
CVE-2025-47351 (published 2025-10-09)
Memory corruption while processing user buffers.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, sg6150, sg6150_firmware, sg6150p, sg6150p_firmware, sm8750, sm8750_firmware, sm8750p, sm8750p_firmware, sm8850, sm8850_firmware, sm8850p, sm8850p_firmware, wcd9370, wcd9370_firmware, wcd9375, wcd9375_firmware, wcd9385
CVE-2025-47352 (published 2025-11-04)
Memory corruption while processing audio streaming operations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: fastconnect_7800, fastconnect_7800_firmware, qcc2072, qcc2072_firmware, wcd9378c, wcd9378c_firmware, wsa8840, wsa8840_firmware, wsa8845, wsa8845_firmware, wsa8845h, wsa8845h_firmware, x2000077, x2000077_firmware, x2000086, x2000086_firmware, x2000090, x2000090_firmware, x2000092, x2000092_firmware, x2000094, x2000094_firmware, xg101002, xg101002_firmware, xg101032
CVE-2025-47353 (published 2025-11-04)
Memory corruption while processing request sent from GVM.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-749
Affected vendors: qualcomm
Affected products: qam8255p, qam8255p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6595, qca6595_firmware, qca6698aq, qca6698aq_firmware, qca6797aq, qca6797aq_firmware, sa7255p, sa7255p_firmware, sa7775p, sa7775p_firmware, sa8255p, sa8255p_firmware, sa8620p, sa8620p_firmware, sa8650p
CVE-2025-47354 (published 2025-10-09)
Memory corruption while allocating buffers in DSP service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_7800, fastconnect_7800_firmware, qmp1000, qmp1000_firmware, sm6475, sm6475_firmware, sm7435, sm7435_firmware, sm8735, sm8735_firmware, sm8750, sm8750_firmware, sm8750p, sm8750p_firmware, snapdragon_4_gen_2_mobile_platform, snapdragon_4_gen_2_mobile_platform_firmware, snapdragon_6_gen_1_mobile_platform, snapdragon_6_gen_1_mobile_platform_firmware, snapdragon_w5\+_gen_1_wearable_platform, snapdragon_w5\+_gen_1_wearable_platform_firmware, sw5100
CVE-2025-47355 (published 2025-10-09)
Memory corruption while invoking remote procedure IOCTL calls.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qcc2072, qcc2072_firmware, sc8380xp, sc8380xp_firmware, snapdragon_7c\+_gen_3_compute, snapdragon_7c\+_gen_3_compute_firmware, snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\), snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware, snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\), snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware, wcd9378c, wcd9378c_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wcn3660b, wcn3660b_firmware, wcn3680b
CVE-2025-47356 (published 2026-01-07)
Memory Corruption when multiple threads concurrently access and modify shared resources.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-415
Affected vendors: qualcomm
Affected products: cologne, cologne_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qca0000, qca0000_firmware, sc8380xp, sc8380xp_firmware, wcd9378c, wcd9378c_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wsa8840, wsa8840_firmware, wsa8845, wsa8845_firmware, wsa8845h, wsa8845h_firmware, x2000077, x2000077_firmware, x2000086
CVE-2025-47357 (published 2025-11-04)
Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: qualcomm
Affected products: qam8255p, qam8255p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6678aq, qca6678aq_firmware, qca6696, qca6696_firmware, qca6698aq, qca6698aq_firmware, qca6797aq, qca6797aq_firmware, qcs9100
CVE-2025-47358 (published 2026-02-02)
Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qcc2072, qcc2072_firmware, sc8380xp, sc8380xp_firmware, snapdragon_8cx_gen_3_compute_platform, snapdragon_8cx_gen_3_compute_platform_firmware, wcd9378c, wcd9378c_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wsa8830, wsa8830_firmware, wsa8835, wsa8835_firmware, wsa8840, wsa8840_firmware, wsa8845, wsa8845_firmware, wsa8845h
CVE-2025-47359 (published 2026-02-02)
Memory Corruption when multiple threads simultaneously access a memory free API.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, qcc2072, qcc2072_firmware, sc8180x-aaab, sc8180x-aaab_firmware, sc8180x-acaf, sc8180x-acaf_firmware, sc8180x-ad, sc8180x-ad_firmware, sc8180xp-aaab
CVE-2025-47360 (published 2025-11-04)
Memory corruption while processing client message during device management.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: qualcomm
Affected products: qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6574au, qca6574au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6688aq, qca6688aq_firmware, qca6696, qca6696_firmware, qca6698aq
CVE-2025-47361 (published 2025-11-04)
Memory corruption when triggering a subsystem crash with an out-of-range identifier.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6574au, qca6574au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6688aq, qca6688aq_firmware, qca6696, qca6696_firmware, qca6698aq
CVE-2025-47362 (published 2025-11-04)
Information disclosure while processing message from client with invalid payload.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: msm8996au, msm8996au_firmware, qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6574au, qca6574au_firmware, qca6584au, qca6584au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6688aq
CVE-2025-47363 (published 2026-02-02)
Memory corruption when calculating oversized partition sizes without proper checks.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6574au, qca6574au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6688aq, qca6688aq_firmware, qca6696, qca6696_firmware, qca6698aq
CVE-2025-47364 (published 2026-02-02)
Memory corruption while calculating offset from partition start point.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6574au, qca6574au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6688aq, qca6688aq_firmware, qca6696, qca6696_firmware, qca6698aq
CVE-2025-47365 (published 2025-11-04)
Memory corruption while processing large input data from a remote source via a communication interface.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6574au, qca6574au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6688aq, qca6688aq_firmware, qca6696, qca6696_firmware, qca6698aq
CVE-2025-47366 (published 2026-02-02)
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-749
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, flight_rb5_5g, flight_rb5_5g_firmware, qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m
CVE-2025-47367 (published 2025-11-04)
Memory corruption while accessing a buffer during IOCTL processing.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qcc2072, qcc2072_firmware, qcm5430, qcm5430_firmware, qcm6490, qcm6490_firmware, qcs5430, qcs5430_firmware, qcs6490, qcs6490_firmware, sc8380xp, sc8380xp_firmware, snapdragon_7c\+_gen_3_compute, snapdragon_7c\+_gen_3_compute_firmware, snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\), snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware, snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\), snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware, video_collaboration_vc3_platform
CVE-2025-47368 (published 2025-11-04)
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, sc8380xp, sc8380xp_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wsa8840, wsa8840_firmware, wsa8845, wsa8845_firmware, wsa8845h, wsa8845h_firmware
CVE-2025-47369 (published 2026-01-07)
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, flight_rb5_5g_platform, flight_rb5_5g_platform_firmware, mdm9628, mdm9628_firmware, qam8295p, qam8295p_firmware, qca6174a, qca6174a_firmware, qca6391
CVE-2025-47370 (published 2025-11-04)
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, csrb31024, csrb31024_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6391, qca6391_firmware, qca6554a
CVE-2025-47371 (published 2026-03-02)
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: 5g_fixed_wireless_access_platform, 5g_fixed_wireless_access_platform_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, fwa_gen_3_ultra, fwa_gen_3_ultra_firmware, g1_gen_1, g1_gen_1_firmware, milos, milos_firmware, netrani
CVE-2025-47372 (published 2025-12-18)
Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: qam8255p, qam8255p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6678aq, qca6678aq_firmware, qca6696, qca6696_firmware, qca6698aq, qca6698aq_firmware, qca6797aq, qca6797aq_firmware, sa7255p
CVE-2025-47373 (published 2026-03-02)
Memory Corruption when accessing buffers with invalid length during TA invocation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, cologne, cologne_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, fwa_gen_3_ultra, fwa_gen_3_ultra_firmware, g1_gen_1, g1_gen_1_firmware, g2_gen_1, g2_gen_1_firmware, iq-615, iq-615_firmware, iq-8275, iq-8275_firmware, iq-8300, iq-8300_firmware, iq-9075
CVE-2025-47374 (published 2026-04-06)
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, pandeiro, pandeiro_firmware, qln1083bd, qln1083bd_firmware, qln1086bd, qln1086bd_firmware, qpa1083bd, qpa1083bd_firmware, qpa1086bd, qpa1086bd_firmware, qxm1083, qxm1083_firmware, qxm1086, qxm1086_firmware, qxm1093, qxm1093_firmware, qxm1094, qxm1094_firmware, qxm1095, qxm1095_firmware, qxm1096
CVE-2025-47375 (published 2026-03-02)
Memory corruption while handling different IOCTL calls from the user-space simultaneously.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, flight_rb5_5g_platform, flight_rb5_5g_platform_firmware, fwa_gen_3_ultra, fwa_gen_3_ultra_firmware, g1_gen_1, g1_gen_1_firmware, lemans_au_lgit