7.8

CVE-2025-47381

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
QualcommLemans Au Lgit Firmware Version-
   QualcommLemans Au Lgit Version-
QualcommLemansau Firmware Version-
   QualcommLemansau Version-
QualcommQam8255p Firmware Version-
   QualcommQam8255p Version-
QualcommQamsrv1h Firmware Version-
   QualcommQamsrv1h Version-
QualcommQamsrv1m Firmware Version-
   QualcommQamsrv1m Version-
QualcommQca6574 Firmware Version-
   QualcommQca6574 Version-
QualcommQca6574a Firmware Version-
   QualcommQca6574a Version-
QualcommQca6574au Firmware Version-
   QualcommQca6574au Version-
QualcommQca6595 Firmware Version-
   QualcommQca6595 Version-
QualcommQca6595au Firmware Version-
   QualcommQca6595au Version-
QualcommQca6688aq Firmware Version-
   QualcommQca6688aq Version-
QualcommQca6696 Firmware Version-
   QualcommQca6696 Version-
QualcommQca9367 Firmware Version-
   QualcommQca9367 Version-
QualcommQca9377 Firmware Version-
   QualcommQca9377 Version-
QualcommSa6155p Firmware Version-
   QualcommSa6155p Version-
QualcommSa7255p Firmware Version-
   QualcommSa7255p Version-
QualcommSa7775p Firmware Version-
   QualcommSa7775p Version-
QualcommSa8155p Firmware Version-
   QualcommSa8155p Version-
QualcommSa8195p Firmware Version-
   QualcommSa8195p Version-
QualcommSa8255p Firmware Version-
   QualcommSa8255p Version-
QualcommSa8620p Firmware Version-
   QualcommSa8620p Version-
QualcommSa8770p Firmware Version-
   QualcommSa8770p Version-
QualcommSa9000p Firmware Version-
   QualcommSa9000p Version-
QualcommSrv1h Firmware Version-
   QualcommSrv1h Version-
QualcommSrv1m Firmware Version-
   QualcommSrv1m Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.01% 0.019
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
product-security@qualcomm.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.