Search/CVE-2025-47348
● CVE — High

CVE-2025-47348

VendorqualcommProductsa6145p firmware, sa6150p firmware, qcs6125 firmware, aqt1000 firmware, ar8035 firmware, csra6620 firmware, csra6640 firmware, qcs2290 firmware, qcs6490 firmware, sa4150p firmware, sa4155p firmware, qcs4490 firmware, qcs8550 firmware, fastconnect 6200 firmware, qdu1010 firmware, qdx1010 firmware, qdx1011 firmware, qfw7114 firmware, qfw7124 firmware, qep8111 firmware, qcs5430 firmware, qmp1000 firmware, qcs9100 firmware, qcs615 firmware, robotics rb2 platform firmwareDiscoveredJan 7, 2026UpdatedOct 7, 2026

Memory corruption while processing identity credential operations in the trusted application.

CVSS v3.1
7.8 HIGH
EPSS
0.08%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 3, 2026
● 0.01pp
0.07% → 0.08% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Jan 7, 2026
Disclosure — published as a CVE record. · last revised by NVD Oct 7, 2026