Skip to main content

Aqt1000 Firmware CVE-2025-47333

MEDIUM
Use After Free (CWE-416)
2026-01-07 product-security@qualcomm.com
Buffer Overflow Use After Free Memory Corruption Qualcomm Aqt1000 Firmware Ar8031 Firmware Ar8035 Firmware C V2x 9150 Firmware Csra6620 Firmware Csra6640 Firmware Csrb31024 Firmware Fastconnect 6200 Firmware Fastconnect 6700 Firmware Fastconnect 6800 Firmware Fastconnect 6900 Firmware Fastconnect 7800 Firmware Flight Rb5 5g Platform Firmware Fsm10056 Firmware Mdm9628 Firmware Qam8255p Firmware Qam8295p Firmware Qam8650p Firmware Qam8775p Firmware Qamsrv1h Firmware Qamsrv1m Firmware Qca2066 Firmware Qca6174a Firmware Qca6391 Firmware Qca6564 Firmware Qca6564a Firmware Qca6564au Firmware Qca6574 Firmware Qca6574a Firmware Qca6574au Firmware Qca6584au Firmware Qca6595 Firmware Qca6595au Firmware Qca6678aq Firmware Qca6688aq Firmware Qca6696 Firmware Qca6698aq Firmware Qca6698au Firmware Qca6797aq Firmware Qca8081 Firmware Qca8337 Firmware Qca9367 Firmware Qca9377 Firmware Qcc710 Firmware Qcm2290 Firmware Qcm4490 Firmware Qcm5430 Firmware Qcm6125 Firmware Qcm6490 Firmware Qcm8550 Firmware Qcn6024 Firmware Qcn6224 Firmware Qcn6274 Firmware Qcn9011 Firmware Qcn9012 Firmware Qcn9024 Firmware Qcs2290 Firmware Qcs410 Firmware Qcs4490 Firmware Qcs5430 Firmware Qcs610 Firmware Qcs6125 Firmware Qcs6490 Firmware Qcs7230 Firmware Qcs8250 Firmware Qcs8550 Firmware Qdu1010 Firmware Qdx1010 Firmware Qdx1011 Firmware Qep8111 Firmware Qfw7114 Firmware Qfw7124 Firmware Qmp1000 Firmware Qrb5165m Firmware Qrb5165n Firmware Qualcomm 215 Mobile Platform Firmware Robotics Rb2 Platform Firmware Robotics Rb5 Platform Firmware Sa2150p Firmware Sa4150p Firmware Sa4155p Firmware Sa6145p Firmware Sa6150p Firmware Sa6155 Firmware Sa6155p Firmware Sa7255p Firmware Sa7775p Firmware Sa8145p Firmware Sa8150p Firmware Sa8155 Firmware Sa8155p Firmware Sa8195p Firmware Sa8255p Firmware Sa8295p Firmware Sa8620p Firmware Sa8650p Firmware Sa8770p Firmware Sa8775p Firmware Sa9000p Firmware Sd660 Firmware Sd855 Firmware Sd865 5g Firmware Sdm429w Firmware Sdx55 Firmware Sdx61 Firmware Sg4150p Firmware Sg8275 Firmware Sg8275p Firmware Sm4635 Firmware Sm6225p Firmware Sm6475 Firmware Sm6650 Firmware Sm6650p Firmware Sm7250p Firmware Sm7325p Firmware Sm7435 Firmware Sm7550 Firmware Sm7550p Firmware Sm7635 Firmware Sm7635p Firmware Sm7675 Firmware Sm7675p Firmware Sm8475p Firmware Sm8550p Firmware Sm8635 Firmware Sm8635p Firmware Sm8650q Firmware Sm8735 Firmware Sm8750 Firmware Sm8750p Firmware Smart Audio 400 Platform Firmware Snapdragon 4 Gen 1 Mobile Platform Firmware Snapdragon 4 Gen 2 Mobile Platform Firmware Snapdragon 429 Mobile Platform Firmware Snapdragon 460 Mobile Platform Firmware Snapdragon 480 5g Mobile Platform Firmware Snapdragon 6 Gen 1 Mobile Platform Firmware Snapdragon 660 Mobile Platform Firmware Snapdragon 662 Mobile Platform Firmware Snapdragon 680 4g Mobile Platform Firmware Snapdragon 690 5g Mobile Platform Firmware Snapdragon 695 5g Mobile Platform Firmware Snapdragon 7 Gen 1 Mobile Platform Firmware Snapdragon 720g Mobile Platform Firmware Snapdragon 778g 5g Mobile Platform Firmware Snapdragon 8 Gen 1 Firmware Snapdragon 8 Gen 1 Mobile Platform Firmware Snapdragon 8 Gen 2 Mobile Platform Firmware Snapdragon 8 Gen 3 Mobile Platform Firmware Snapdragon 855 Mobile Platform Firmware Snapdragon 865 5g Mobile Platform Firmware Snapdragon 888 5g Mobile Platform Firmware Snapdragon Ar1 Gen 1 Platform Firmware Snapdragon Ar2 Gen 1 Platform Firmware Snapdragon Auto 4g Modem Firmware Snapdragon Auto 5g Modem Rf Firmware Snapdragon Auto 5g Modem Rf Gen 2 Firmware Snapdragon X12 Lte Modem Firmware Snapdragon X32 5g Modem Rf System Firmware Snapdragon X35 5g Modem Rf System Firmware Snapdragon X55 5g Modem Rf System Firmware Snapdragon X65 5g Modem Rf System Firmware Snapdragon X72 5g Modem Rf System Firmware Snapdragon X75 5g Modem Rf System Firmware Snapdragon Xr1 Platform Firmware Snapdragon Xr2 5g Platform Firmware Srv1h Firmware Srv1m Firmware Ssg2115p Firmware Ssg2125p Firmware Sw5100 Firmware Sw5100p Firmware Sxr1120 Firmware Sxr1230p Firmware Sxr2230p Firmware Sxr2250p Firmware Sxr2330p Firmware Sxr2350p Firmware Video Collaboration Vc1 Platform Firmware Video Collaboration Vc3 Platform Firmware Video Collaboration Vc5 Platform Firmware Vision Intelligence 300 Platform Firmware Vision Intelligence 400 Platform Firmware Wcd9326 Firmware Wcd9335 Firmware Wcd9340 Firmware Wcd9341 Firmware Wcd9360 Firmware Wcd9370 Firmware Wcd9371 Firmware Wcd9375 Firmware Wcd9378 Firmware Wcd9380 Firmware Wcd9385 Firmware Wcd9390 Firmware Wcd9395 Firmware Wcn3615 Firmware Wcn3620 Firmware Wcn3660b Firmware Wcn3680b Firmware Wcn3910 Firmware Wcn3950 Firmware Wcn3980 Firmware Wcn3988 Firmware Wcn3990 Firmware Wcn6650 Firmware Wcn6740 Firmware Wcn6755 Firmware Wcn7750 Firmware Wcn7860 Firmware Wcn7861 Firmware Wcn7880 Firmware Wcn7881 Firmware Wsa8810 Firmware Wsa8815 Firmware Wsa8830 Firmware Wsa8832 Firmware Wsa8835 Firmware Wsa8840 Firmware Wsa8845 Firmware Wsa8845h Firmware Snapdragon 7C Gen 3 Compute Firmware Snapdragon Ar1 Gen 1 Platform Luna1 Firmware Snapdragon 765 5G Mobile Platform Sm7250 Aa Firmware Snapdragon 765G 5G Mobile Platform Sm7250 Ab Firmware Snapdragon 768G 5G Mobile Platform Sm7250 Ac Firmware Snapdragon 855 860 Mobile Platform Sm8150 Ac Firmware Snapdragon 865 5G Mobile Platform Sm8250 Ab Firmware Snapdragon 870 5G Mobile Platform Sm8250 Ac Firmware Snapdragon 888 5G Mobile Platform Sm8350 Ac Firmware Snapdragon 480 5G Mobile Platform Sm4350 Ac Firmware Snapdragon 685 4G Mobile Platform Sm6225 Ad Firmware Snapdragon 778G 5G Mobile Platform Sm7325 Ae Firmware Snapdragon 782G Mobile Platform Sm7325 Af Firmware Snapdragon Xr2 Gen 1 Platform Firmware Snapdragon W5 Gen 1 Wearable Platform Firmware Snapdragon 7 Gen 2 Mobile Platform Firmware
6.6
CVSS 3.1 · Vendor: qualcomm
View

Vulnerability Assessment

Weakness
CWE
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Memory lifecycle management
MITRE ATT&CK

2 techniques across 2 tactics: Execution, Privilege Escalation

The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up.

Impact

CVSS 6.6 (MEDIUM). Attack vector: Local. Complexity: Low. Privileges required: Low. User interaction: None.

Exploit ScenarioDerived

An attacker could exploit this vulnerability to compromise the affected system.

This Month Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).
Patch available 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

Memory corruption while handling buffer mapping operations in the cryptographic driver. [CVSS 6.6 MEDIUM]

RemediationAI

A vendor patch is available — apply it immediately.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

Classified as CWE-416 (Use After Free). Affects Sa6150P Firmware. Memory corruption while handling buffer mapping operations in the cryptographic driver.

Know when Aqt1000 Firmware gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources

No credit card · 7-day full trial

Severity by source

Vendor (qualcomm) PRIMARY 6.6 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Primary rating from Vendor (qualcomm) · only source for this CVE.

CVSS VectorVendor: qualcomm

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
High
Availability
Low

Lifecycle Timeline

2
Patch released
Jan 28, 2026 - 16:44 nvd
Patch available
CVE Published
Jan 07, 2026 - 12:17 nvd
MEDIUM 6.6

DescriptionCVE.org

Memory corruption while handling buffer mapping operations in the cryptographic driver.

Executive ViewAI

Why It Matters

CVE-2025-47333 presents notable security risk, a use-after-free vulnerability rated CVSS 6.6. Exploitation could compromise the security of affected deployments. A patch is available and should be applied during regular vulnerability management.

Business Impact: Moderate
Compensating Controls

Apply vendor patch. If patching is delayed: enable ASLR/DEP, apply network segmentation.

Threat Intelligence Overview

EPSS Score
0.0%
Top 96% exploitable
Data Quality
3 sources
Confidence: Low

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity MEDIUM
CISA KEV No
Public POC No
EPSS 0.0%
Patch available Yes
Active threat No
Deciding rule
MEDIUM severity (CVSS 4.0-6.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

Exploitation· derived
None
System Exposure· derived
Small
Automatable· derived
No

Priority Score

33
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +33
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.

Use-after-free vulnerabilities occur when a program continues to access memory through a pointer after that memory has been deallocated.

Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.

Affected Products (CPE)CVE.org

cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa7255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa7775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8155_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8620p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8650p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*
+ 219 more
CVE-2025-21480 HIGH
8.6 Jun 03

Qualcomm GPU micronode contains a memory corruption vulnerability (CVE-2025-21480, CVSS 8.6) caused by unauthorized comm

CVE-2025-21479 HIGH
8.6 Jun 03

A second Qualcomm GPU micronode memory corruption vulnerability (CVE-2025-21479, CVSS 8.6) exists in the unauthorized co

CVE-2023-22388 CRITICAL
9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v

CVE-2023-22385 CRITICAL
9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner

CVE-2023-28562 CRITICAL
9.8 Sep 05

Memory corruption while handling payloads from remote ESL. Rated critical severity (CVSS 9.8), this vulnerability is rem

CVE-2023-21631 CRITICAL
9.8 Jul 04

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received

CVE-2022-33234 CRITICAL
9.8 Nov 15

Memory corruption in video due to configuration weakness. Rated critical severity (CVSS 9.8), this vulnerability is remo

CVE-2022-25748 CRITICAL
9.8 Oct 19

Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. Rated critical severity (

CVE-2022-25720 CRITICAL
9.8 Oct 19

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute

CVE-2022-25687 CRITICAL
9.8 Oct 19

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdr

CVE-2022-25688 CRITICAL
9.8 Sep 16

Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, S

CVE-2022-25686 CRITICAL
9.8 Sep 16

Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Comput

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy