What is the CVSS score of CVE-2025-47348?

CVE-2025-47348 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Qca6696 Firmware are affected by CVE-2025-47348?

CVE-2025-47348 presents notable security risk rated CVSS 7.8. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-47348?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Qca6696 Firmware CVE-2025-47348

HIGH

Use of Uninitialized Variable (CWE-457)

2026-01-07 product-security@qualcomm.com

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 07, 2026 - 12:17 nvd

HIGH 7.8

DescriptionCVE.org

Memory corruption while processing identity credential operations in the trusted application.

AnalysisAI

Memory corruption while processing identity credential operations in the trusted application. [CVSS 7.8 HIGH]

Technical ContextAI

Affects Aqt1000 Firmware. Memory corruption while processing identity credential operations in the trusted application.

RemediationAI

Monitor vendor advisories for a patch.

More in Qca6696 Firmware

View all

CVE-2026-21385 HIGH Act Now POC

7.8 Mar 02

A Qualcomm chipset vulnerability (CVE-2026-21385) causes memory corruption through improper integer handling during memo

CVE-2024-21480 CRITICAL Act Now

9.8 May 06

Memory corruption while playing audio file having large-sized input buffer. Rated critical severity (CVSS 9.8), this vul

CVE-2024-21463 CRITICAL Act Now

9.8 Apr 01

Memory corruption while processing Codec2 during v13k decoder pitch synthesis. Rated critical severity (CVSS 9.8), this

CVE-2023-33045 CRITICAL Act Now

9.8 Nov 07

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. Rated critical severity

CVE-2023-22388 CRITICAL Act Now

9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v

CVE-2023-33028 CRITICAL Act Now

9.8 Oct 03

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. Rated critical severity (CVSS 9.8), this vuln

CVE-2023-22385 CRITICAL Act Now

9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner

CVE-2023-21631 CRITICAL Act Now

9.8 Jul 04

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received

CVE-2022-33234 CRITICAL Act Now

9.8 Nov 15

Memory corruption in video due to configuration weakness. Rated critical severity (CVSS 9.8), this vulnerability is remo

CVE-2022-25748 CRITICAL Act Now

9.8 Oct 19

Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. Rated critical severity (

CVE-2022-25720 CRITICAL Act Now

9.8 Oct 19

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute

CVE-2022-25718 CRITICAL Act Now

9.8 Oct 19

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Sna

Same weakness CWE-457 – Use of Uninitialized Variable

View all

CVE-2021-40418 CRITICAL POC

9.8

CVE-2021-3928 HIGH POC

7.8

CVE-2024-21502 HIGH POC

7.5

CVE-2026-22188 MEDIUM POC

6.9

CVE-2024-47540 CRITICAL

9.8

CVE-2026-6748 CRITICAL

9.8

CVE-2026-14405 CRITICAL

9.6

CVE-2023-25588 MEDIUM POC

5.5

Same technique Memory Corruption

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2014-0322 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-4792 HIGH POC

8.8

CVE-2010-3333 HIGH POC

7.8

CVE-2025-47348 vulnerability details – vuln.today

Back

Qca6696 Firmware CVE-2025-47348

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Qca6696 Firmware

Same weakness CWE-457 – Use of Uninitialized Variable

Same technique Memory Corruption

Share

External POC / Exploit Code