Cologne Firmware
CVE-2025-47356
HIGH
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
Memory Corruption when multiple threads concurrently access and modify shared resources.
AnalysisAI
Memory Corruption when multiple threads concurrently access and modify shared resources. [CVSS 7.8 HIGH]
Technical ContextAI
Affects Cologne Firmware. Memory Corruption when multiple threads concurrently access and modify shared resources.
RemediationAI
Monitor vendor advisories for a patch.
More in Cologne Firmware
View allVideo Collaboration Vc3 Platform Firmware versions up to - contains a security vulnerability (CVSS 7.8).
Memory Corruption when processing invalid user address with nonstandard buffer address. [CVSS 7.8 HIGH]
Memory Corruption when accessing buffers with invalid length during TA invocation. [CVSS 7.8 HIGH]
Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters. [CVSS 7.
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain. [CVSS 7.1 HIGH]
Transient DOS when processing a received frame with an excessively large authentication information element. [CVSS 6.5 M
Same weakness CWE-415 – Double Free
View allSame technique Memory Corruption
View allShare
External POC / Exploit Code
Leaving vuln.today