Search/CVE-2025-47388
● CVE — High

CVE-2025-47388

VendorqualcommProductqcs610 firmware, wcd9370 firmware, wcd9375 firmware, sw5100 firmware, sw5100p firmware, snapdragon w5+ gen 1 wearable platform firmware, fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 6200 firmware, fastconnect 7800 firmware, snapdragon 4 gen 2 mobile platform firmware, sm7435 firmware, sm8750 firmware, snapdragon 6 gen 1 mobile platform firmware, wcd9378 firmware, video collaboration vc3 platform firmware, video collaboration vc1 platform firmware, sm8750p firmware, qmp1000 firmware, sm8735 firmware, sxr2330p firmware, sm6475 firmware, sg6150 firmware, sg6150p firmware, sxr2350p firmwareDiscoveredJan 7, 2026UpdatedOct 7, 2026

Memory corruption while passing pages to DSP with an unaligned starting address.

View graph Watch Export
CVSS v3.1
7.8 HIGH
EPSS
0.08%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 3, 2026
● 0.01pp
0.07% → 0.08% over 5 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Jan 7, 2026
Disclosure — published as a CVE record. · last revised by NVD Oct 7, 2026