Use After Free in Qualcomm products - CVE-2025-47336

Vulnerability identifier: #VU121062

CSH Severity: Low

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-47336

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local privileged application to execute arbitrary code.

The vulnerability exists due to improper input validation in Camera Driver. A local privileged application can execute arbitrary code.

WCN7861
WSA8845H
WSA8845
WSA8840
WSA8835
WSA8830
WCN7881
WCN7880
FastConnect 7800
WCN7860
WCN7750
WCD9395
WCD9378
SM8750P
SM8750
SM8735
QMP1000
WSA8832

Install security update from vendor's website.

• https://docs.qualcomm.com/securitybulletin/january-2026-bulletin.html

• Multiple vulnerabilities in Qualcomm chipsets (January 2026)