CVE-2025-47316

Sept. 25, 2025, 4:04 p.m.

7.8
High

Description

Memory corruption due to double free when multiple threads race to set the timestamp store.

Product(s) Impacted

Vendor Product Versions
Qualcomm
  • Aqt1000 Firmware
  • Aqt1000
  • Fastconnect 6200 Firmware
  • Fastconnect 6200
  • Fastconnect 6700 Firmware
  • Fastconnect 6700
  • Fastconnect 6800 Firmware
  • Fastconnect 6800
  • Fastconnect 6900 Firmware
  • Fastconnect 6900
  • Fastconnect 7800 Firmware
  • Fastconnect 7800
  • Qca6391 Firmware
  • Qca6391
  • Qca6420 Firmware
  • Qca6420
  • Qca6430 Firmware
  • Qca6430
  • Sc8380xp Firmware
  • Sc8380xp
  • Snapdragon 7c\+ Gen 3 Compute Firmware
  • Snapdragon 7c\+ Gen 3 Compute
  • Snapdragon 8c Compute Platform \(sc8180x-ad\) Firmware
  • Snapdragon 8c Compute Platform \(sc8180x-ad\)
  • Snapdragon 8cx Compute Platform \(sc8180x-aa\) Firmware
  • Snapdragon 8cx Compute Platform \(sc8180x-aa\)
  • Snapdragon 8cx Compute Platform \(sc8180x-ab\) Firmware
  • Snapdragon 8cx Compute Platform \(sc8180x-ab\)
  • Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180x-ac\) Firmware
  • Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180x-ac\)
  • Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180x-af\) Firmware
  • Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180x-af\)
  • Snapdragon 8cx Gen 3 Compute Platform \(sc8280xp-ab\) Firmware
  • Snapdragon 8cx Gen 3 Compute Platform \(sc8280xp-ab\)
  • Snapdragon 8cx Gen 3 Compute Platform \(sc8280xp-bb\) Firmware
  • Snapdragon 8cx Gen 3 Compute Platform \(sc8280xp-bb\)
  • Wcd9340 Firmware
  • Wcd9340
  • Wcd9341 Firmware
  • Wcd9341
  • Wcd9380 Firmware
  • Wcd9380
  • Wcd9385 Firmware
  • Wcd9385
  • Wsa8810 Firmware
  • Wsa8810
  • Wsa8815 Firmware
  • Wsa8815
  • Wsa8830 Firmware
  • Wsa8830
  • Wsa8835 Firmware
  • Wsa8835
  • Wsa8840 Firmware
  • Wsa8840
  • Wsa8845 Firmware
  • Wsa8845
  • Wsa8845h Firmware
  • Wsa8845h
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-415
Double Free
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

*CPE(s)

Affected systems and software identified for this CVE.

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
o qualcomm aqt1000_firmware - / / / / / / /
h qualcomm aqt1000 - / / / / / / /
o qualcomm fastconnect_6200_firmware - / / / / / / /
h qualcomm fastconnect_6200 - / / / / / / /
o qualcomm fastconnect_6700_firmware - / / / / / / /
h qualcomm fastconnect_6700 - / / / / / / /
o qualcomm fastconnect_6800_firmware - / / / / / / /
h qualcomm fastconnect_6800 - / / / / / / /
o qualcomm fastconnect_6900_firmware - / / / / / / /
h qualcomm fastconnect_6900 - / / / / / / /
o qualcomm fastconnect_7800_firmware - / / / / / / /
h qualcomm fastconnect_7800 - / / / / / / /
o qualcomm qca6391_firmware - / / / / / / /
h qualcomm qca6391 - / / / / / / /
o qualcomm qca6420_firmware - / / / / / / /
h qualcomm qca6420 - / / / / / / /
o qualcomm qca6430_firmware - / / / / / / /
h qualcomm qca6430 - / / / / / / /
o qualcomm sc8380xp_firmware - / / / / / / /
h qualcomm sc8380xp - / / / / / / /
o qualcomm snapdragon_7c\+_gen_3_compute_firmware - / / / / / / /
h qualcomm snapdragon_7c\+_gen_3_compute - / / / / / / /
o qualcomm snapdragon_8c_compute_platform_\(sc8180x-ad\)_firmware - / / / / / / /
h qualcomm snapdragon_8c_compute_platform_\(sc8180x-ad\) - / / / / / / /
o qualcomm snapdragon_8cx_compute_platform_\(sc8180x-aa\)_firmware - / / / / / / /
h qualcomm snapdragon_8cx_compute_platform_\(sc8180x-aa\) - / / / / / / /
o qualcomm snapdragon_8cx_compute_platform_\(sc8180x-ab\)_firmware - / / / / / / /
h qualcomm snapdragon_8cx_compute_platform_\(sc8180x-ab\) - / / / / / / /
o qualcomm snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\)_firmware - / / / / / / /
h qualcomm snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\) - / / / / / / /
o qualcomm snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-af\)_firmware - / / / / / / /
h qualcomm snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-af\) - / / / / / / /
o qualcomm snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware - / / / / / / /
h qualcomm snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\) - / / / / / / /
o qualcomm snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware - / / / / / / /
h qualcomm snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\) - / / / / / / /
o qualcomm wcd9340_firmware - / / / / / / /
h qualcomm wcd9340 - / / / / / / /
o qualcomm wcd9341_firmware - / / / / / / /
h qualcomm wcd9341 - / / / / / / /
o qualcomm wcd9380_firmware - / / / / / / /
h qualcomm wcd9380 - / / / / / / /
o qualcomm wcd9385_firmware - / / / / / / /
h qualcomm wcd9385 - / / / / / / /
o qualcomm wsa8810_firmware - / / / / / / /
h qualcomm wsa8810 - / / / / / / /
o qualcomm wsa8815_firmware - / / / / / / /
h qualcomm wsa8815 - / / / / / / /
o qualcomm wsa8830_firmware - / / / / / / /
h qualcomm wsa8830 - / / / / / / /
o qualcomm wsa8835_firmware - / / / / / / /
h qualcomm wsa8835 - / / / / / / /
o qualcomm wsa8840_firmware - / / / / / / /
h qualcomm wsa8840 - / / / / / / /
o qualcomm wsa8845_firmware - / / / / / / /
h qualcomm wsa8845 - / / / / / / /
o qualcomm wsa8845h_firmware - / / / / / / /
h qualcomm wsa8845h - / / / / / / /

CVSS Score

7.8 / 10

CVSS Data - 3.1

  • Attack Vector: LOCAL
  • Attack Complexity: LOW
  • Privileges Required: LOW
  • Scope: UNCHANGED
  • Confidentiality Impact: HIGH
  • Integrity Impact: HIGH
  • Availability Impact: HIGH
  • CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

    View Vector String

Timeline

Published: Sept. 24, 2025, 4:15 p.m.
Last Modified: Sept. 25, 2025, 4:04 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

product-security@qualcomm.com

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.