What is the CVSS score of CVE-2025-47358?

CVE-2025-47358 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of X2000092 Firmware are affected by CVE-2025-47358?

CVE-2025-47358 is a kernel memory corruption vulnerability that could allow attackers to crash systems or potentially execute arbitrary code with elevated privileges.

How to fix or mitigate CVE-2025-47358?

Within 24 hours: Identify all systems running affected software versions and assess exposure in production environments. Within 7 days: Implement compensating controls such as network segmentation, disable vulnerable features if non-critical, and apply principle of least privilege to limit user-space access. Within 30 days: Establish communication with vendor for patch timeline, conduct full vulnerability assessment across the infrastructure, and prepare rapid deployment procedures for when patches become available.

X2000092 Firmware CVE-2025-47358

HIGH

Use After Free (CWE-416)

2026-02-02 product-security@qualcomm.com

Linux Memory Corruption X2000092 Firmware Snapdragon 8cx Gen 3 Compute Platform Firmware X2000086 Firmware Sc8380xp Firmware Xg101002 Firmware X2000090 Firmware X2000094 Firmware Xg101032 Firmware Wcd9378c Firmware Wcd9385 Firmware Qcc2072 Firmware Wsa8840 Firmware Wsa8845 Firmware X2000077 Firmware Wsa8845h Firmware Wsa8835 Firmware Xg101039 Firmware Fastconnect 6900 Firmware Fastconnect 7800 Firmware Wcd9380 Firmware Wsa8830 Firmware

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:01 vuln.today

CVE Published

Feb 02, 2026 - 16:16 nvd

HIGH 7.8

DescriptionCVE.org

Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.

AnalysisAI

Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently. [CVSS 7.8 HIGH]

Technical ContextAI

Classified as CWE-416 (Use After Free). Affects Fastconnect 6900 Firmware. Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.