Qualcomm Driver IOCTL Buffer Use-After-Free (CVE-2025-47377)
CVE-2025-47377 Published on March 2, 2026
Use After Free in Automotive Audio
Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
Vulnerability Analysis
CVE-2025-47377 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
Weakness Type
What is a Dangling pointer Vulnerability?
Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.
CVE-2025-47377 has been classified to as a Dangling pointer vulnerability or weakness.
Products Associated with CVE-2025-47377
Want to know whenever a new CVE is published for Qualcomm Snapdragon? stack.watch will email you.
Affected Versions
Qualcomm, Inc. Snapdragon:- Version AR8035 is affected.
- Version FastConnect 6200 is affected.
- Version FastConnect 6900 is affected.
- Version FastConnect 7800 is affected.
- Version Flight RB5 5G Platform is affected.
- Version FWA Gen 3 Ultra Platform is affected.
- Version G1 Gen 1 is affected.
- Version LeMans_AU_LGIT is affected.
- Version LeMansAU is affected.
- Version Milos is affected.
- Version QAM8255P is affected.
- Version QAM8295P is affected.
- Version QAMSRV1H is affected.
- Version QAMSRV1M is affected.
- Version QCA6174A is affected.
- Version QCA6391 is affected.
- Version QCA6574 is affected.
- Version QCA6574A is affected.
- Version QCA6574AU is affected.
- Version QCA6584AU is affected.
- Version QCA6595 is affected.
- Version QCA6595AU is affected.
- Version QCA6678AQ is affected.
- Version QCA6688AQ is affected.
- Version QCA6696 is affected.
- Version QCA6698AQ is affected.
- Version QCA6698AU is affected.
- Version QCA6797AQ is affected.
- Version QCA8081 is affected.
- Version QCA8337 is affected.
- Version QCA8695AU is affected.
- Version QCA9367 is affected.
- Version QCA9377 is affected.
- Version QCC710 is affected.
- Version QCM2290 is affected.
- Version QCM4325 is affected.
- Version QCM6125 is affected.
- Version QCN6224 is affected.
- Version QCN6274 is affected.
- Version QCN9011 is affected.
- Version QCN9012 is affected.
- Version QCS2290 is affected.
- Version QCS4290 is affected.
- Version QCS8550 is affected.
- Version QEP8111 is affected.
- Version QFW7114 is affected.
- Version QFW7124 is affected.
- Version QRB5165N is affected.
- Version Qualcomm Video Collaboration VC1 Platform is affected.
- Version Qualcomm Video Collaboration VC5 Platform is affected.
- Version Robotics RB5 Platform is affected.
- Version SA6155P is affected.
- Version SA7255P is affected.
- Version SA7775P is affected.
- Version SA8155P is affected.
- Version SA8195P is affected.
- Version SA8255P is affected.
- Version SA8295P is affected.
- Version SA8620P is affected.
- Version SA8770P is affected.
- Version SA9000P is affected.
- Version SD662 is affected.
- Version SM6225P is affected.
- Version SM6650P is affected.
- Version SM7550 is affected.
- Version SM7550P is affected.
- Version SM7635P is affected.
- Version SM7675 is affected.
- Version SM7675P is affected.
- Version SM8550P is affected.
- Version SM8635 is affected.
- Version SM8635P is affected.
- Version SM8650Q is affected.
- Version Snapdragon 4 Gen 1 Mobile Platform is affected.
- Version Snapdragon 460 Mobile Platform is affected.
- Version Snapdragon 480 5G Mobile Platform is affected.
- Version Snapdragon 480+ 5G Mobile Platform is affected.
- Version Snapdragon 6 Gen 4 Mobile Platform is affected.
- Version Snapdragon 662 Mobile Platform is affected.
- Version Snapdragon 680 4G Mobile Platform is affected.
- Version Snapdragon 685 4G Mobile Platform is affected.
- Version Snapdragon 695 5G Mobile Platform is affected.
- Version Snapdragon 7s Gen 3 Mobile Platform is affected.
- Version Snapdragon 8 Gen 2 Mobile Platform is affected.
- Version Snapdragon 8 Gen 3 Mobile Platform is affected.
- Version Snapdragon 8+ Gen 2 Mobile Platform is affected.
- Version Snapdragon Auto 5G Modem-RF Gen 2 is affected.
- Version Snapdragon W5+ Gen 1 Wearable Platform is affected.
- Version Snapdragon X32 5G Modem-RF System is affected.
- Version Snapdragon X35 5G Modem-RF System is affected.
- Version Snapdragon X72 5G Modem-RF System is affected.
- Version Snapdragon X75 5G Modem-RF System is affected.
- Version SRV1H is affected.
- Version SRV1M is affected.
- Version SW5100 is affected.
- Version SW5100P is affected.
- Version SXR2330P is affected.
- Version SXR2350P is affected.
- Version WCD9340 is affected.
- Version WCD9370 is affected.
- Version WCD9371 is affected.
- Version WCD9375 is affected.
- Version WCD9378 is affected.
- Version WCD9380 is affected.
- Version WCD9385 is affected.
- Version WCD9390 is affected.
- Version WCD9395 is affected.
- Version WCN3910 is affected.
- Version WCN3950 is affected.
- Version WCN3980 is affected.
- Version WCN3988 is affected.
- Version WCN6450 is affected.
- Version WCN6650 is affected.
- Version WCN6755 is affected.
- Version WSA8810 is affected.
- Version WSA8815 is affected.
- Version WSA8830 is affected.
- Version WSA8832 is affected.
- Version WSA8835 is affected.
- Version WSA8840 is affected.
- Version WSA8845 is affected.
- Version WSA8845H is affected.
Exploit Probability
EPSS
0.01%
Percentile
1.83%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.