CVE-2025-47378

High CVSS: 7.1

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Vendor

Product

CWE

Yayın Tarihi

2026-03-02 17:16:25

Güncelleme

2026-03-05 20:38:46

Source Identifier

product-security@qualcomm.com

KEV Date Added

CWE-497 Cologne Firmware HIGH Qualcomm 2026

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bulletin.html

High

CVE-2026-21385

Memory corruption while using alignments for memory allocation.

High

CVE-2025-59600

Memory Corruption when adding user-supplied data without checking available buffer space.

High

CVE-2025-59603

Memory Corruption when processing invalid user address with nonstandard buffer address.

High

CVE-2025-47385

Memory Corruption when accessing trusted execution environment without proper privilege check.

High

CVE-2025-47386

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

High

CVE-2025-47381

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.