Search/CVE-2025-47337
● CVE — Medium

CVE-2025-47337

VendorqualcommProductqca6391 firmware, qcm6490 firmware, qcs6490 firmware, qcn9011 firmware, qcn9012 firmware, sg8275 firmware, sg8275p firmware, qca6698aq firmware, qca6797aq firmware, qcs8550 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware, qcm8550 firmware, qcm5430 firmware, sm7550 firmware, qcs5430 firmware, sm6650 firmware, sm7635 firmware, qmp1000 firmware, qcs9100 firmware, qcs615 firmware, sm6650p firmware, sm7550p firmware, qca6698au firmwareDiscoveredJan 7, 2026UpdatedOct 7, 2026

Memory corruption while accessing a synchronization object during concurrent operations.

CVSS v3.1
6.7 MEDIUM
EPSS
0.08%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 3, 2026
● 0.01pp
0.08% → 0.08% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Jan 7, 2026
Disclosure — published as a CVE record. · last revised by NVD Oct 7, 2026