What is the CVSS score of CVE-2025-47399?

CVE-2025-47399 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Cologne Firmware are affected by CVE-2025-47399?

CVE-2025-47399 is a high-severity memory corruption vulnerability affecting sensor property management systems that could allow attackers to crash services or potentially execute arbitrary code…

How to fix or mitigate CVE-2025-47399?

Within 24 hours: Identify all systems running affected sensor software and restrict network access to sensor management interfaces via firewall rules; document affected assets and their business criticality. Within 7 days: Implement input validation at the application layer, disable remote IOCTL sensor property update functionality if not operationally critical, and establish monitoring for suspicious IOCTL calls. Within 30 days: Develop and test a patching plan with the vendor, establish a timeline for remediation, and review alternative sensor solutions if patch timeline exceeds acceptable risk tolerance.

Cologne Firmware CVE-2025-47399

HIGH

Classic Buffer Overflow (CWE-120)

2026-02-02 product-security@qualcomm.com

Memory Corruption Cologne Firmware Fastconnect 7800 Firmware Wcd9378c Firmware Wsa8840 Firmware Wsa8845 Firmware Wsa8845h Firmware X2000077 Firmware X2000086 Firmware X2000090 Firmware X2000092 Firmware X2000094 Firmware Xg101002 Firmware Xg101032 Firmware Xg101039 Firmware

7.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:01 vuln.today

CVE Published

Feb 02, 2026 - 16:16 nvd

HIGH 7.8

DescriptionNVD

Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.

AnalysisAI

Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters. [CVSS 7.8 HIGH]

Technical ContextAI

Classified as CWE-120 (Classic Buffer Overflow). Affects Cologne Firmware. Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.

RemediationAI

Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible.

CVE-2025-47399 vulnerability details – vuln.today

Back

Cologne Firmware CVE-2025-47399

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code