Use After Free in Qualcomm products - CVE-2025-47374
Published: April 15, 2026
Vulnerability identifier: #VU126202
CSH Severity: Low
CVSS v4: 5.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-47374
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local application to execute arbitrary code.
The vulnerability exists due to improper input validation in Camera Driver. A local application can execute arbitrary code.
Affected software
Snapdragon AR1 Gen 1 Platform
XRV9209
XRV7209
WSA8835
WSA8830
WCN7861
WCN7860
WCD9385
WCD9380
SXR2350P
SXR2330P
SXR2250P
SXR2230P
Snapdragon AR1+ Gen 1 Platform
FastConnect 6900
SAR2130P
SAR1165P
QXM1096
QXM1095
QXM1094
QXM1093
QXM1086
QXM1083
QPA1086BD
QPA1083BD
QLN1086BD
QLN1083BD
Pandeiro
FastConnect 7800
WSA8832
XRV9209
XRV7209
WSA8835
WSA8830
WCN7861
WCN7860
WCD9385
WCD9380
SXR2350P
SXR2330P
SXR2250P
SXR2230P
Snapdragon AR1+ Gen 1 Platform
FastConnect 6900
SAR2130P
SAR1165P
QXM1096
QXM1095
QXM1094
QXM1093
QXM1086
QXM1083
QPA1086BD
QPA1083BD
QLN1086BD
QLN1083BD
Pandeiro
FastConnect 7800
WSA8832
How to mitigate CVE-2025-47374
Install security update from vendor's website.