CVE-2025-47378

Published Mar 2, 2026

Last updated 8 months ago

CVSS high 7.1
Mobile device

Overview

Description
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.
Source
product-security@qualcomm.com
NVD status
Analyzed
Products
cologne_firmware, fastconnect_6700_firmware, fastconnect_6800_firmware, fastconnect_6900_firmware, fastconnect_7800_firmware, lemans_au_lgit_firmware, lemansau_firmware, pandeiro_firmware, qam8255p_firmware, qamsrv1h_firmware, qamsrv1m_firmware, qca6391_firmware, qca6595_firmware, qca6595au_firmware, qca6696_firmware, qca6698aq_firmware, qca6797aq_firmware, qln1083bd_firmware, qln1086bd_firmware, qpa1083bd_firmware, qpa1086bd_firmware, qxm1083_firmware, qxm1086_firmware, qxm1093_firmware, qxm1094_firmware, qxm1095_firmware, qxm1096_firmware, sa7255p_firmware, sa7775p_firmware, sa8255p_firmware, sa8620p_firmware, sa8770p_firmware, sa9000p_firmware, sar1165p_firmware, sar1250p_firmware, sar2130p_firmware, sar2230p_firmware, sd865_5g_firmware, snapdragon_8_elite_gen_5_firmware, snapdragon_865_5g_mobile_platform_firmware, snapdragon_865\+_5g_mobile_platform_firmware, snapdragon_870_5g_mobile_platform_firmware, snapdragon_ar1_gen_1_platform_firmware, snapdragon_ar1\+_gen_1_platform_firmware, snapdragon_x55_5g_modem-rf_system_firmware, snapdragon_xr2_5g_platform_firmware, snapdragon_xr2\+_gen_1_platform_firmware, srv1h_firmware, srv1m_firmware, sxr2230p_firmware, sxr2250p_firmware, wcd9378c_firmware, wcd9380_firmware, wcd9385_firmware, wcd9395_firmware, wcn3950_firmware, wcn7860_firmware, wcn7861_firmware, wsa8810_firmware, wsa8815_firmware, wsa8830_firmware, wsa8832_firmware, wsa8835_firmware, wsa8840_firmware, wsa8845_firmware, wsa8845h_firmware, x2000077_firmware, x2000086_firmware, x2000090_firmware, x2000092_firmware, x2000094_firmware, xg101002_firmware, xg101032_firmware, xg101039_firmware

Risk scores

CVSS 3.1

Type
Primary
Base score
7.1
Impact score
5.2
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Severity
HIGH

Weaknesses

product-security@qualcomm.com
CWE-497

Social media

Hype score
Not currently trending

Configurations