CVE-2025-47377Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
Updated under an hour ago ()
Does this affect you?
It affects qualcomm ar8035_firmware and 59 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
- CVSS
- 7.8 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-416
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Analyzed
- Record last updated
- Jun 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
qualcomm ar8035_firmware qualcomm:ar8035_firmware | all versions | NVD |
qualcomm fastconnect_6200_firmware qualcomm:fastconnect_6200_firmware | all versions | NVD |
qualcomm fastconnect_6900_firmware qualcomm:fastconnect_6900_firmware | all versions | NVD |
qualcomm fastconnect_7800_firmware qualcomm:fastconnect_7800_firmware | all versions | NVD |
qualcomm flight_rb5_5g_platform_firmware qualcomm:flight_rb5_5g_platform_firmware | all versions | NVD |
qualcomm fwa_gen_3_ultra_firmware qualcomm:fwa_gen_3_ultra_firmware | all versions | NVD |
qualcomm g1_gen_1_firmware qualcomm:g1_gen_1_firmware | all versions | NVD |
qualcomm lemans_au_lgit_firmware qualcomm:lemans_au_lgit_firmware | all versions | NVD |
qualcomm lemansau_firmware qualcomm:lemansau_firmware | all versions | NVD |
qualcomm milos_firmware qualcomm:milos_firmware | all versions | NVD |
qualcomm qam8255p_firmware qualcomm:qam8255p_firmware | all versions | NVD |
qualcomm qam8295p_firmware qualcomm:qam8295p_firmware | all versions | NVD |
qualcomm qamsrv1h_firmware qualcomm:qamsrv1h_firmware | all versions | NVD |
qualcomm qamsrv1m_firmware qualcomm:qamsrv1m_firmware | all versions | NVD |
qualcomm qca6174a_firmware qualcomm:qca6174a_firmware | all versions | NVD |
qualcomm qca6391_firmware qualcomm:qca6391_firmware | all versions | NVD |
qualcomm qca6574_firmware qualcomm:qca6574_firmware | all versions | NVD |
qualcomm qca6574a_firmware qualcomm:qca6574a_firmware | all versions | NVD |
qualcomm qca6574au_firmware qualcomm:qca6574au_firmware | all versions | NVD |
qualcomm qca6584au_firmware qualcomm:qca6584au_firmware | all versions | NVD |
qualcomm qca6595_firmware qualcomm:qca6595_firmware | all versions | NVD |
qualcomm qca6595au_firmware qualcomm:qca6595au_firmware | all versions | NVD |
qualcomm qca6678aq_firmware qualcomm:qca6678aq_firmware | all versions | NVD |
qualcomm qca6688aq_firmware qualcomm:qca6688aq_firmware | all versions | NVD |
qualcomm qca6696_firmware qualcomm:qca6696_firmware | all versions | NVD |
qualcomm qca6698aq_firmware qualcomm:qca6698aq_firmware | all versions | NVD |
qualcomm qca6698au_firmware qualcomm:qca6698au_firmware | all versions | NVD |
qualcomm qca6797aq_firmware qualcomm:qca6797aq_firmware | all versions | NVD |
qualcomm qca8081_firmware qualcomm:qca8081_firmware | all versions | NVD |
qualcomm qca8337_firmware qualcomm:qca8337_firmware | all versions | NVD |
qualcomm qca8695au_firmware qualcomm:qca8695au_firmware | all versions | NVD |
qualcomm qca9367_firmware qualcomm:qca9367_firmware | all versions | NVD |
qualcomm qca9377_firmware qualcomm:qca9377_firmware | all versions | NVD |
qualcomm qcc710_firmware qualcomm:qcc710_firmware | all versions | NVD |
qualcomm qcm2290_firmware qualcomm:qcm2290_firmware | all versions | NVD |
qualcomm qcm4325_firmware qualcomm:qcm4325_firmware | all versions | NVD |
qualcomm qcm6125_firmware qualcomm:qcm6125_firmware | all versions | NVD |
qualcomm qcn6224_firmware qualcomm:qcn6224_firmware | all versions | NVD |
qualcomm qcn6274_firmware qualcomm:qcn6274_firmware | all versions | NVD |
qualcomm qcn9011_firmware qualcomm:qcn9011_firmware | all versions | NVD |
qualcomm qcn9012_firmware qualcomm:qcn9012_firmware | all versions | NVD |
qualcomm qcs2290_firmware qualcomm:qcs2290_firmware | all versions | NVD |
qualcomm qcs4290_firmware qualcomm:qcs4290_firmware | all versions | NVD |
qualcomm qcs8550_firmware qualcomm:qcs8550_firmware | all versions | NVD |
qualcomm qep8111_firmware qualcomm:qep8111_firmware | all versions | NVD |
qualcomm snapdragon_8+_gen_2_mobile_platform_firmware qualcomm:snapdragon_8+_gen_2_mobile_platform_firmware | all versions | NVD |
qualcomm snapdragon_auto_5g_modem-rf_gen_2_firmware qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware | all versions | NVD |
qualcomm snapdragon_w5+_gen_1_wearable_platform_firmware qualcomm:snapdragon_w5+_gen_1_wearable_platform_firmware | all versions | NVD |
qualcomm snapdragon_x32_5g_modem-rf_system_firmware qualcomm:snapdragon_x32_5g_modem-rf_system_firmware | all versions | NVD |
qualcomm snapdragon_x35_5g_modem-rf_system_firmware qualcomm:snapdragon_x35_5g_modem-rf_system_firmware | all versions | NVD |
qualcomm snapdragon_x72_5g_modem-rf_system_firmware qualcomm:snapdragon_x72_5g_modem-rf_system_firmware | all versions | NVD |
qualcomm snapdragon_x75_5g_modem-rf_system_firmware qualcomm:snapdragon_x75_5g_modem-rf_system_firmware | all versions | NVD |
qualcomm srv1h_firmware qualcomm:srv1h_firmware | all versions | NVD |
qualcomm srv1m_firmware qualcomm:srv1m_firmware | all versions | NVD |
qualcomm sw5100_firmware qualcomm:sw5100_firmware | all versions | NVD |
qualcomm sw5100p_firmware qualcomm:sw5100p_firmware | all versions | NVD |
qualcomm sxr2330p_firmware qualcomm:sxr2330p_firmware | all versions | NVD |
qualcomm sxr2350p_firmware qualcomm:sxr2350p_firmware | all versions | NVD |
qualcomm wcd9340_firmware qualcomm:wcd9340_firmware | all versions | NVD |
qualcomm wcd9370_firmware qualcomm:wcd9370_firmware | all versions | NVD |
References
- https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bulletin.htmlpatch, vendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.