What is the CVSS score of CVE-2025-47337?

CVE-2025-47337 has a CVSS 3.1 base score of 6.7 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Fastconnect 6700 Firmware are affected by CVE-2025-47337?

CVE-2025-47337 presents notable security risk, a use-after-free vulnerability rated CVSS 6.7. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2025-47337?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Fastconnect 6700 Firmware CVE-2025-47337

MEDIUM

Use After Free (CWE-416)

2026-01-07 product-security@qualcomm.com

Memory Corruption Fastconnect 6700 Firmware Fastconnect 6900 Firmware Fastconnect 7800 Firmware Qca6391 Firmware Qca6698aq Firmware Qca6698au Firmware Qca6797aq Firmware Qcm5430 Firmware Qcm6490 Firmware Qcm8550 Firmware Qcn9011 Firmware Qcn9012 Firmware Qcs5430 Firmware Qcs615 Firmware Qcs6490 Firmware Qcs8550 Firmware Qcs9100 Firmware Qmp1000 Firmware Sg8275 Firmware Sg8275p Firmware Sm6650 Firmware Sm6650p Firmware Sm7550 Firmware Sm7550p Firmware Sm7635 Firmware Sm7635p Firmware Sm7675 Firmware Sm7675p Firmware Sm8550p Firmware Sm8635 Firmware Sm8635p Firmware Sm8650q Firmware Sm8735 Firmware Sm8750 Firmware Sm8750p Firmware Snapdragon 8 Gen 2 Mobile Platform Firmware Snapdragon 8 Gen 3 Mobile Platform Firmware Snapdragon Ar1 Gen 1 Platform Firmware Sxr2330p Firmware Sxr2350p Firmware Video Collaboration Vc3 Platform Firmware Wcd9370 Firmware Wcd9371 Firmware Wcd9375 Firmware Wcd9378 Firmware Wcd9380 Firmware Wcd9385 Firmware Wcd9390 Firmware Wcd9395 Firmware Wcn6650 Firmware Wcn6755 Firmware Wcn7750 Firmware Wcn7860 Firmware Wcn7861 Firmware Wcn7880 Firmware Wcn7881 Firmware Wsa8830 Firmware Wsa8832 Firmware Wsa8835 Firmware Wsa8840 Firmware Wsa8845 Firmware Wsa8845h Firmware

6.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.7 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

Patch released

Jan 27, 2026 - 21:40 nvd

Patch available

CVE Published

Jan 07, 2026 - 12:17 nvd

MEDIUM 6.7

DescriptionCVE.org

Memory corruption while accessing a synchronization object during concurrent operations.

AnalysisAI

Memory corruption while accessing a synchronization object during concurrent operations. [CVSS 6.7 MEDIUM]

Technical ContextAI

Classified as CWE-416 (Use After Free). Affects Fastconnect 6700 Firmware. Memory corruption while accessing a synchronization object during concurrent operations.