What is the CVSS score of CVE-2025-47396?

CVE-2025-47396 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Snapdragon Ar1 Gen 1 Platform Firmware are affected by CVE-2025-47396?

Organizations using Memory corruption occurs when a secure application face notable risk from CVE-2025-47396 rated CVSS 7.8. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2025-47396?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Vendor patch is available.

Snapdragon Ar1 Gen 1 Platform Firmware CVE-2025-47396

HIGH

Double Free (CWE-415)

2026-01-07 product-security@qualcomm.com

Memory Corruption Snapdragon Ar1 Gen 1 Platform Firmware Wcd9395 Firmware Wcn3950 Firmware Wcn7750 Firmware Wcd9380 Firmware Video Collaboration Vc3 Platform Firmware Wsa8840 Firmware Snapdragon 4 Gen 2 Mobile Platform Firmware Wcn3980 Firmware Wsa8815 Firmware Wcn7881 Firmware Wsa8830 Firmware Fastconnect 6900 Firmware Sxr2330p Firmware Snapdragon 6 Gen 1 Mobile Platform Firmware Wcd9378 Firmware Sxr2350p Firmware Qmp1000 Firmware Sm6475 Firmware Sm8750 Firmware Fastconnect 6200 Firmware Sw5100p Firmware Wsa8832 Firmware Wcn7860 Firmware Sm8750p Firmware Wcd9375 Firmware Sw5100 Firmware Wsa8845h Firmware Wcn7861 Firmware Wcd9385 Firmware Sm8735 Firmware Qcs610 Firmware Wcn6755 Firmware Wcn7880 Firmware Wsa8810 Firmware Wsa8845 Firmware Fastconnect 6700 Firmware Sm7435 Firmware Wcd9370 Firmware Fastconnect 7800 Firmware Video Collaboration Vc1 Platform Firmware Wsa8835 Firmware Wcn3988 Firmware

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

Patch released

Jan 27, 2026 - 19:15 nvd

Patch available

CVE Published

Jan 07, 2026 - 12:17 nvd

HIGH 7.8

DescriptionCVE.org

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

AnalysisAI

Memory corruption occurs when a secure application is launched on a device with insufficient memory. [CVSS 7.8 HIGH]

Technical ContextAI

Affects Fastconnect 6200 Firmware. Memory corruption occurs when a secure application is launched on a device with insufficient memory.

RemediationAI

A vendor patch is available — apply it immediately.

More in Snapdragon Ar1 Gen 1 Platform Firmware

View all

CVE-2026-21385 HIGH Act Now POC

7.8 Mar 02

A Qualcomm chipset vulnerability (CVE-2026-21385) causes memory corruption through improper integer handling during memo

CVE-2024-53011 HIGH This Week

7.9 Mar 03

Information disclosure may occur due to improper permission and access controls to Video Analytics engine. Rated high se

CVE-2024-53010 HIGH This Week

7.8 Jun 03

Memory corruption vulnerability in Qualcomm's Virtual Machine (VM) attachment mechanism that occurs when the Host Linux

CVE-2025-47348 HIGH This Week

7.8 Jan 07

Memory corruption while processing identity credential operations in the trusted application. [CVSS 7.8 HIGH]

CVE-2025-47346 HIGH This Week

7.8 Jan 07

Memory corruption while processing a secure logging command in the trusted application. [CVSS 7.8 HIGH]

CVE-2025-47339 HIGH This Week

7.8 Jan 07

Memory corruption while deinitializing a HDCP session. [CVSS 7.8 HIGH]

CVE-2025-59600 HIGH This Week

7.8 Mar 02

Memory Corruption when adding user-supplied data without checking available buffer space. [CVSS 7.8 HIGH]

CVE-2025-47373 HIGH This Week

7.8 Mar 02

Memory Corruption when accessing buffers with invalid length during TA invocation. [CVSS 7.8 HIGH]

CVE-2025-21448 HIGH This Week

7.5 Apr 07

Transient DOS may occur while parsing SSID in action frames. Rated high severity (CVSS 7.5), this vulnerability is remot

CVE-2025-21434 HIGH This Week

7.5 Apr 07

Transient DOS may occur while parsing EHT operation IE or EHT capability IE. Rated high severity (CVSS 7.5), this vulner

CVE-2025-21430 HIGH This Week

7.5 Apr 07

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session. Rated high se

CVE-2025-21463 HIGH This Week

7.5 Jun 03

Transient denial-of-service vulnerability in wireless beacon frame processing that occurs when a device receives a malfo

Same weakness CWE-415 – Double Free

View all

CVE-2014-0502 HIGH POC

8.8

CVE-2018-0101 CRITICAL POC

10.0

CVE-2023-25136 MEDIUM POC

6.5

CVE-2026-33824 CRITICAL POC

9.8

CVE-2014-1767 HIGH POC

7.2

CVE-2016-5768 CRITICAL POC

9.8

CVE-2016-5772 CRITICAL POC

9.8

CVE-2016-3132 CRITICAL POC

9.8

Same technique Memory Corruption

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2014-0322 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-4792 HIGH POC

8.8

CVE-2010-3333 HIGH POC

7.8

CVE-2025-47396 vulnerability details – vuln.today

Back

Snapdragon Ar1 Gen 1 Platform Firmware CVE-2025-47396

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Snapdragon Ar1 Gen 1 Platform Firmware

Same weakness CWE-415 – Double Free

Same technique Memory Corruption

Share

External POC / Exploit Code