Qualcomm Wcn6755 Firmware vulnerabilities

CVE-2025-47383 High · 7.2 CWE-325 Mar 2, 2026

Missing Cryptographic Step in Data Modem

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

CVE-2025-47379 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.

CVE-2025-47377 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.

CVE-2025-47376 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.

CVE-2025-47375 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory corruption while handling different IOCTL calls from the user-space simultaneously.

CVE-2025-47373 High · 7.8 CWE-787 Mar 2, 2026

Out-of-bounds Write in Automotive

Memory Corruption when accessing buffers with invalid length during TA invocation.

CVE-2025-47371 Medium · 6.5 CWE-617 Mar 2, 2026

Reachable Assertion in Modem

Transient DOS when an LTE RLC packet with invalid TB is received by UE.

CVE-2025-47402 Medium · 6.5 CWE-125 Feb 2, 2026

Buffer Over-read in WLAN Firmware

Transient DOS when processing a received frame with an excessively large authentication information element.

CVE-2025-47398 High · 7.8 CWE-416 Feb 2, 2026

Use After Free in Graphics

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.

CVE-2025-47397 High · 7.8 CWE-401 Feb 2, 2026

Improper Release of Memory Before Removing Last Reference in Graphics

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.

CVE-2025-47366 High · 7.8 CWE-749 Feb 2, 2026

Exposed Dangerous Method or Function in HLOS

Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.

CVE-2025-47396 High · 7.8 CWE-415 Jan 7, 2026

Double Free in Graphics

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

CVE-2025-47394 High · 7.8 CWE-120 Jan 7, 2026

Buffer Copy Without Checking Size of Input in DSP Service

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.

CVE-2025-47388 High · 7.8 CWE-120 Jan 7, 2026

Buffer Copy without Checking Size of Input in DSP Service

Memory corruption while passing pages to DSP with an unaligned starting address.

CVE-2025-47369 Medium · 5.5 CWE-200 Jan 7, 2026

Information Exposure in Computer Vision

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

CVE-2025-47348 High · 7.8 CWE-457 Jan 7, 2026

Use of Uninitialized Variable in HLOS

Memory corruption while processing identity credential operations in the trusted application.

CVE-2025-47346 High · 7.8 CWE-787 Jan 7, 2026

Out-of-bounds Write in HLOS

Memory corruption while processing a secure logging command in the trusted application.

CVE-2025-47345 High · 8.4 CWE-323 Jan 7, 2026

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Cryptographic issue may occur while encrypting license data.

CVE-2025-47344 Medium · 6.4 CWE-367 Jan 7, 2026

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption while handling sensor utility operations.

CVE-2025-47339 High · 7.8 CWE-416 Jan 7, 2026

Use After Free in HLOS

Memory corruption while deinitializing a HDCP session.

CVE-2025-47337 Medium · 6.7 CWE-416 Jan 7, 2026

Use After Free in Camera Driver

Memory corruption while accessing a synchronization object during concurrent operations.

CVE-2025-47335 Medium · 6.7 CWE-120 Jan 7, 2026

Buffer Copy Without Checking Size of Input in Camera Driver

Memory corruption while parsing clock configuration data for a specific hardware type.

CVE-2025-47334 Medium · 6.7 CWE-120 Jan 7, 2026

Buffer Copy Without Checking Size of Input in Camera Driver

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

CVE-2025-47333 Medium · 6.6 CWE-416 Jan 7, 2026

Use After Free in HLOS

Memory corruption while handling buffer mapping operations in the cryptographic driver.

CVE-2025-47332 Medium · 6.4 CWE-367 Jan 7, 2026

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption while processing a config call from userspace.