Skip to main content

Wcd9335 Firmware CVE-2025-47344

MEDIUM
Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
2026-01-07 product-security@qualcomm.com
Memory Corruption Wcd9335 Firmware Snapdragon 695 5g Mobile Platform Firmware Qca6698aq Firmware Fastconnect 7800 Firmware Wcn6650 Firmware Wcd9390 Firmware Csra6620 Firmware Wsa8830 Firmware Sxr2330p Firmware Sm4635 Firmware Qcs4490 Firmware Wcn6740 Firmware Sm7675 Firmware Sm7675p Firmware Qca6595au Firmware Qcm5430 Firmware Wcn3988 Firmware Snapdragon Ar1 Gen 1 Platform Firmware Wsa8810 Firmware Sxr2250p Firmware Qcs9100 Firmware Fastconnect 6200 Firmware Sxr2350p Firmware Qcs615 Firmware Sm7635p Firmware Sm8735 Firmware Sm7635 Firmware Wcn7750 Firmware Video Collaboration Vc3 Platform Firmware Snapdragon 480 5g Mobile Platform Firmware Snapdragon 4 Gen 2 Mobile Platform Firmware Fastconnect 6700 Firmware Wcd9385 Firmware Sxr2230p Firmware Qcs5430 Firmware Csra6640 Firmware Sm8750 Firmware Wcn7860 Firmware Qmp1000 Firmware Wsa8845 Firmware Qcm4490 Firmware Robotics Rb2 Platform Firmware Wcd9370 Firmware Wcn7880 Firmware Wcd9380 Firmware Wcn6755 Firmware Sa6155p Firmware Wcn7861 Firmware Snapdragon 4 Gen 1 Mobile Platform Firmware Wsa8835 Firmware Sa8195p Firmware Sm8635p Firmware Qca6574a Firmware Qcs8550 Firmware Snapdragon 680 4g Mobile Platform Firmware Qca6696 Firmware Qca6574 Firmware Sm8635 Firmware Sm6650 Firmware Snapdragon Ar2 Gen 1 Platform Firmware Snapdragon 8 Gen 3 Mobile Platform Firmware Wsa8845h Firmware Wcd9378 Firmware Sm8650q Firmware Wcn7881 Firmware Wsa8815 Firmware Sa8155p Firmware Snapdragon 662 Mobile Platform Firmware Wcn3950 Firmware Wcd9395 Firmware Wsa8832 Firmware Sm6650p Firmware Wsa8840 Firmware Qcm6490 Firmware Wcd9375 Firmware Fastconnect 6900 Firmware Qcs6490 Firmware Qca6574au Firmware Sm8750p Firmware
6.7
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.7 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
Patch released
Jan 27, 2026 - 21:24 nvd
Patch available
CVE Published
Jan 07, 2026 - 12:17 nvd
MEDIUM 6.7

DescriptionCVE.org

Memory corruption while handling sensor utility operations.

AnalysisAI

Memory corruption while handling sensor utility operations. [CVSS 6.7 MEDIUM]

Technical ContextAI

Affects Csra6620 Firmware. Memory corruption while handling sensor utility operations.

RemediationAI

A vendor patch is available — apply it immediately.

More in Wcd9335 Firmware

View all
CVE-2026-21385 HIGH POC
7.8 Mar 02

A Qualcomm chipset vulnerability (CVE-2026-21385) causes memory corruption through improper integer handling during memo
CVE-2025-27038 HIGH
7.5 Jun 03

Qualcomm Adreno GPU drivers in Chrome contain a use-after-free vulnerability (CVE-2025-27038, CVSS 7.5) enabling memory

CVE-2023-22388 CRITICAL
9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v
CVE-2023-22385 CRITICAL
9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner
CVE-2023-28562 CRITICAL
9.8 Sep 05

Memory corruption while handling payloads from remote ESL. Rated critical severity (CVSS 9.8), this vulnerability is rem
CVE-2023-21631 CRITICAL
9.8 Jul 04

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received
CVE-2022-33234 CRITICAL
9.8 Nov 15

Memory corruption in video due to configuration weakness. Rated critical severity (CVSS 9.8), this vulnerability is remo
CVE-2022-25727 CRITICAL
9.8 Nov 15

Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon
CVE-2022-25674 CRITICAL
9.8 Nov 15

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdra
CVE-2022-25748 CRITICAL
9.8 Oct 19

Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. Rated critical severity (
CVE-2022-25720 CRITICAL
9.8 Oct 19

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute
CVE-2022-25718 CRITICAL
9.8 Oct 19

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Sna

Same weakness CWE-367 – Time-of-check Time-of-use (TOCTOU) Race Condition

View all
CVE-2024-30088 HIGH POC
7.0
CVE-2025-22224 CRITICAL
9.3
CVE-2022-48618 HIGH
7.0
CVE-2023-38146 HIGH POC
8.8
CVE-2025-34027 CRITICAL POC
10.0
CVE-2020-1337 HIGH POC
7.8
CVE-2026-25641 CRITICAL POC
10.0
CVE-2024-28718 CRITICAL POC
9.8

Same technique Memory Corruption

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2014-0322 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-4792 HIGH POC
8.8
CVE-2010-3333 HIGH POC
7.8

Share

CVE-2025-47344 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy