CVE-2025-47374 - Vulnerability Details

Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Qualcomm	Fastconnect 6900 Fastconnect 6900 Firmware Fastconnect 7800 Fastconnect 7800 Firmware Pandeiro Pandeiro Firmware Qln1083bd Qln1083bd Firmware Qln1086bd Qln1086bd Firmware Qpa1083bd Qpa1083bd Firmware Qpa1086bd Qpa1086bd Firmware Qxm1083 Qxm1083 Firmware Qxm1086 Qxm1086 Firmware Qxm1093 Qxm1093 Firmware Qxm1094 Qxm1094 Firmware Qxm1095 Qxm1095 Firmware Qxm1096 Qxm1096 Firmware Sar1165p Sar1165p Firmware Sar2130p Sar2130p Firmware Snapdragon Snapdragon Ar1\+ Gen 1 Platform Snapdragon Ar1\+ Gen 1 Platform Firmware Snapdragon Ar1 Gen 1 Platform Snapdragon Ar1 Gen 1 Platform Firmware Sxr2230p Sxr2230p Firmware Sxr2250p Sxr2250p Firmware Sxr2330p Sxr2330p Firmware Sxr2350p Sxr2350p Firmware Wcd9380 Wcd9380 Firmware Wcd9385 Wcd9385 Firmware Wcn7860 Wcn7860 Firmware Wcn7861 Wcn7861 Firmware Wsa8830 Wsa8830 Firmware Wsa8832 Wsa8832 Firmware Wsa8835 Wsa8835 Firmware Xrv7209 Xrv7209 Firmware Xrv9209 Xrv9209 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:qualcomm:qln1083bd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qln1083bd:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:qualcomm:qln1086bd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qln1086bd:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:qualcomm:qpa1083bd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qpa1083bd:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:qualcomm:qpa1086bd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qpa1086bd:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:qualcomm:qxm1083_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qxm1083:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:qualcomm:qxm1086_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qxm1086:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:qualcomm:qxm1093_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qxm1093:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:qualcomm:qxm1094_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qxm1094:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:qualcomm:qxm1095_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qxm1095:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:qualcomm:qxm1096_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qxm1096:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:qualcomm:sar1165p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sar1165p:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:qualcomm:sar2130p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sar2130p:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:qualcomm:snapdragon_ar1_gen_1_platform_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_ar1_gen_1_platform:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:qualcomm:snapdragon_ar1\+_gen_1_platform_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:snapdragon_ar1\+_gen_1_platform:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sxr2230p:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:qualcomm:sxr2250p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sxr2250p:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:qualcomm:sxr2330p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sxr2330p:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:qualcomm:sxr2350p_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sxr2350p:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND

cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*

Configuration 25 [-]

AND

cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*

Configuration 26 [-]

AND

cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

Configuration 27 [-]

AND

cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*

Configuration 28 [-]

AND

cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*

Configuration 29 [-]

AND

cpe:2.3:o:qualcomm:xrv7209_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:xrv7209:-:*:*:*:*:*:*:*

Configuration 30 [-]

AND

cpe:2.3:o:qualcomm:xrv9209_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:xrv9209:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html

History

Wed, 08 Apr 2026 21:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Qualcomm fastconnect 6900 Qualcomm fastconnect 6900 Firmware Qualcomm fastconnect 7800 Qualcomm fastconnect 7800 Firmware Qualcomm pandeiro Qualcomm pandeiro Firmware Qualcomm qln1083bd Qualcomm qln1083bd Firmware Qualcomm qln1086bd Qualcomm qln1086bd Firmware Qualcomm qpa1083bd Qualcomm qpa1083bd Firmware Qualcomm qpa1086bd Qualcomm qpa1086bd Firmware Qualcomm qxm1083 Qualcomm qxm1083 Firmware Qualcomm qxm1086 Qualcomm qxm1086 Firmware Qualcomm qxm1093 Qualcomm qxm1093 Firmware Qualcomm qxm1094 Qualcomm qxm1094 Firmware Qualcomm qxm1095 Qualcomm qxm1095 Firmware Qualcomm qxm1096 Qualcomm qxm1096 Firmware Qualcomm sar1165p Qualcomm sar1165p Firmware Qualcomm sar2130p Qualcomm sar2130p Firmware Qualcomm snapdragon Ar1\+ Gen 1 Platform Qualcomm snapdragon Ar1\+ Gen 1 Platform Firmware Qualcomm snapdragon Ar1 Gen 1 Platform Qualcomm snapdragon Ar1 Gen 1 Platform Firmware Qualcomm sxr2230p Qualcomm sxr2230p Firmware Qualcomm sxr2250p Qualcomm sxr2250p Firmware Qualcomm sxr2330p Qualcomm sxr2330p Firmware Qualcomm sxr2350p Qualcomm sxr2350p Firmware Qualcomm wcd9380 Qualcomm wcd9380 Firmware Qualcomm wcd9385 Qualcomm wcd9385 Firmware Qualcomm wcn7860 Qualcomm wcn7860 Firmware Qualcomm wcn7861 Qualcomm wcn7861 Firmware Qualcomm wsa8830 Qualcomm wsa8830 Firmware Qualcomm wsa8832 Qualcomm wsa8832 Firmware Qualcomm wsa8835 Qualcomm wsa8835 Firmware Qualcomm xrv7209 Qualcomm xrv7209 Firmware Qualcomm xrv9209 Qualcomm xrv9209 Firmware
CPEs		cpe:2.3:h:qualcomm:fastconnect_6900:-:::::::* cpe:2.3:h:qualcomm:fastconnect_7800:-:::::::* cpe:2.3:h:qualcomm:pandeiro:-:::::::* cpe:2.3:h:qualcomm:qln1083bd:-:::::::* cpe:2.3:h:qualcomm:qln1086bd:-:::::::* cpe:2.3:h:qualcomm:qpa1083bd:-:::::::* cpe:2.3:h:qualcomm:qpa1086bd:-:::::::* cpe:2.3:h:qualcomm:qxm1083:-:::::::* cpe:2.3:h:qualcomm:qxm1086:-:::::::* cpe:2.3:h:qualcomm:qxm1093:-:::::::* cpe:2.3:h:qualcomm:qxm1094:-:::::::* cpe:2.3:h:qualcomm:qxm1095:-:::::::* cpe:2.3:h:qualcomm:qxm1096:-:::::::* cpe:2.3:h:qualcomm:sar1165p:-:::::::* cpe:2.3:h:qualcomm:sar2130p:-:::::::* cpe:2.3:h:qualcomm:snapdragon_ar1\+_gen_1_platform:-:::::::* cpe:2.3:h:qualcomm:snapdragon_ar1_gen_1_platform:-:::::::* cpe:2.3:h:qualcomm:sxr2230p:-:::::::* cpe:2.3:h:qualcomm:sxr2250p:-:::::::* cpe:2.3:h:qualcomm:sxr2330p:-:::::::* cpe:2.3:h:qualcomm:sxr2350p:-:::::::* cpe:2.3:h:qualcomm:wcd9380:-:::::::* cpe:2.3:h:qualcomm:wcd9385:-:::::::* cpe:2.3:h:qualcomm:wcn7860:-:::::::* cpe:2.3:h:qualcomm:wcn7861:-:::::::* cpe:2.3:h:qualcomm:wsa8830:-:::::::* cpe:2.3:h:qualcomm:wsa8832:-:::::::* cpe:2.3:h:qualcomm:wsa8835:-:::::::* cpe:2.3:h:qualcomm:xrv7209:-:::::::* cpe:2.3:h:qualcomm:xrv9209:-:::::::* cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:::::::* cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:::::::* cpe:2.3:o:qualcomm:pandeiro_firmware:-:::::::* cpe:2.3:o:qualcomm:qln1083bd_firmware:-:::::::* cpe:2.3:o:qualcomm:qln1086bd_firmware:-:::::::* cpe:2.3:o:qualcomm:qpa1083bd_firmware:-:::::::* cpe:2.3:o:qualcomm:qpa1086bd_firmware:-:::::::* cpe:2.3:o:qualcomm:qxm1083_firmware:-:::::::* cpe:2.3:o:qualcomm:qxm1086_firmware:-:::::::* cpe:2.3:o:qualcomm:qxm1093_firmware:-:::::::* cpe:2.3:o:qualcomm:qxm1094_firmware:-:::::::* cpe:2.3:o:qualcomm:qxm1095_firmware:-:::::::* cpe:2.3:o:qualcomm:qxm1096_firmware:-:::::::* cpe:2.3:o:qualcomm:sar1165p_firmware:-:::::::* cpe:2.3:o:qualcomm:sar2130p_firmware:-:::::::* cpe:2.3:o:qualcomm:snapdragon_ar1\+_gen_1_platform_firmware:-:::::::* cpe:2.3:o:qualcomm:snapdragon_ar1_gen_1_platform_firmware:-:::::::* cpe:2.3:o:qualcomm:sxr2230p_firmware:-:::::::* cpe:2.3:o:qualcomm:sxr2250p_firmware:-:::::::* cpe:2.3:o:qualcomm:sxr2330p_firmware:-:::::::* cpe:2.3:o:qualcomm:sxr2350p_firmware:-:::::::* cpe:2.3:o:qualcomm:wcd9380_firmware:-:::::::* cpe:2.3:o:qualcomm:wcd9385_firmware:-:::::::* cpe:2.3:o:qualcomm:wcn7860_firmware:-:::::::* cpe:2.3:o:qualcomm:wcn7861_firmware:-:::::::* cpe:2.3:o:qualcomm:wsa8830_firmware:-:::::::* cpe:2.3:o:qualcomm:wsa8832_firmware:-:::::::* cpe:2.3:o:qualcomm:wsa8835_firmware:-:::::::* cpe:2.3:o:qualcomm:xrv7209_firmware:-:::::::* cpe:2.3:o:qualcomm:xrv9209_firmware:-:::::::*
Vendors & Products		Qualcomm fastconnect 6900 Qualcomm fastconnect 6900 Firmware Qualcomm fastconnect 7800 Qualcomm fastconnect 7800 Firmware Qualcomm pandeiro Qualcomm pandeiro Firmware Qualcomm qln1083bd Qualcomm qln1083bd Firmware Qualcomm qln1086bd Qualcomm qln1086bd Firmware Qualcomm qpa1083bd Qualcomm qpa1083bd Firmware Qualcomm qpa1086bd Qualcomm qpa1086bd Firmware Qualcomm qxm1083 Qualcomm qxm1083 Firmware Qualcomm qxm1086 Qualcomm qxm1086 Firmware Qualcomm qxm1093 Qualcomm qxm1093 Firmware Qualcomm qxm1094 Qualcomm qxm1094 Firmware Qualcomm qxm1095 Qualcomm qxm1095 Firmware Qualcomm qxm1096 Qualcomm qxm1096 Firmware Qualcomm sar1165p Qualcomm sar1165p Firmware Qualcomm sar2130p Qualcomm sar2130p Firmware Qualcomm snapdragon Ar1\+ Gen 1 Platform Qualcomm snapdragon Ar1\+ Gen 1 Platform Firmware Qualcomm snapdragon Ar1 Gen 1 Platform Qualcomm snapdragon Ar1 Gen 1 Platform Firmware Qualcomm sxr2230p Qualcomm sxr2230p Firmware Qualcomm sxr2250p Qualcomm sxr2250p Firmware Qualcomm sxr2330p Qualcomm sxr2330p Firmware Qualcomm sxr2350p Qualcomm sxr2350p Firmware Qualcomm wcd9380 Qualcomm wcd9380 Firmware Qualcomm wcd9385 Qualcomm wcd9385 Firmware Qualcomm wcn7860 Qualcomm wcn7860 Firmware Qualcomm wcn7861 Qualcomm wcn7861 Firmware Qualcomm wsa8830 Qualcomm wsa8830 Firmware Qualcomm wsa8832 Qualcomm wsa8832 Firmware Qualcomm wsa8835 Qualcomm wsa8835 Firmware Qualcomm xrv7209 Qualcomm xrv7209 Firmware Qualcomm xrv9209 Qualcomm xrv9209 Firmware

Tue, 07 Apr 2026 00:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Qualcomm Qualcomm snapdragon
Vendors & Products		Qualcomm Qualcomm snapdragon

Mon, 06 Apr 2026 18:00:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 06 Apr 2026 16:45:00 +0000

Type	Values Removed	Values Added
Description		Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.
Title		Use After Free in Camera Driver
Weaknesses		CWE-416
References		https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: qualcomm

Published: 2026-04-06T15:33:39.322Z

Updated: 2026-04-06T16:32:18.294Z

Reserved: 2025-05-06T08:33:16.265Z

Link: CVE-2025-47374

Vulnrichment

Updated: 2026-04-06T16:22:45.822Z

NVD

Status : Analyzed

Published: 2026-04-06T16:16:27.177

Modified: 2026-04-08T21:09:54.443

Link: CVE-2025-47374

Redhat

No data.

Metrics

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object