CVE-2025-27077

Use After Free in Automotive Software platform based on QNX

Memory corruption while processing message in guest VM.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qnx Qualcomm

Products

Qnx Qam8255p Qam8255p Firmware and 53 more

CVE-2025-47314

Improper Input Validation in Automotive Software platform based on QNX

Memory corruption while processing data sent by FE driver.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Qam8255p Qam8255p Firmware Qam8295p and 58 more

CVE-2025-47315

Use After Free in Automotive Software platform based on QNX

Memory corruption while handling repeated memory unmap requests from guest VM.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qnx Qualcomm

Products

Qnx Qam8255p Qam8255p Firmware and 53 more

CVE-2025-27053

Incorrect Calculation of Buffer Size in HLOS

Memory corruption during PlayReady APP usecase while processing TA commands.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

215 Mobile Platform 215 Mobile Platform Firmware 315 5g Iot Modem and 636 more

CVE-2025-27054

Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

315 5g Iot Modem 315 5g Iot Modem Firmware 9205 Lte Modem and 596 more

CVE-2025-47347

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Memory corruption while processing control commands in the virtual memory management interface.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qnx Qualcomm

Products

Qnx Qam8255p Qam8255p Firmware and 73 more

CVE-2025-27070

Out-of-bounds Write in Windows Compute

Memory corruption while performing encryption and decryption commands.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8035 Ar8035 Firmware Fastconnect 6200 and 348 more

CVE-2025-47353

Exposed Dangerous Method or Function in Automotive Software platform based on QNX

Memory corruption while processing request sent from GVM.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Qam8255p Qam8255p Firmware Qam8650p and 34 more

CVE-2025-47360

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Memory corruption while processing client message during device management.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qnx Qualcomm

Products

Qnx Qam8255p Qam8255p Firmware and 69 more

CVE-2025-47361

Improper Validation of Array Index in Automotive Software platform based on QNX

Memory corruption when triggering a subsystem crash with an out-of-range identifier.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qnx Qualcomm

Products

Qnx Qam8255p Qam8255p Firmware and 55 more

CVE-2025-47365

Integer Overflow or Wraparound in Automotive Platform

Memory corruption while processing large input data from a remote source via a communication interface.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Qam8255p Qam8255p Firmware Qam8295p and 68 more

CVE-2025-47363

Integer Overflow or Wraparound in Automotive

Memory corruption when calculating oversized partition sizes without proper checks.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Qam8255p Qam8255p Firmware Qam8295p and 68 more

CVE-2025-47364

Integer Overflow or Wraparound in Automotive

Memory corruption while calculating offset from partition start point.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Qam8255p Qam8255p Firmware Qam8295p and 68 more

CVE-2025-47366

Exposed Dangerous Method or Function in HLOS

Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8035 Ar8035 Firmware Fastconnect 6200 and 316 more

CVE-2025-47397

Improper Release of Memory Before Removing Last Reference in Graphics

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8031 Ar8031 Firmware Csra6620 and 292 more

CVE-2025-47398

Use After Free in Graphics

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8031 Ar8031 Firmware Csra6620 and 304 more

CVE-2025-47402

Buffer Over-read in WLAN Firmware

Transient DOS when processing a received frame with an excessively large authentication information element.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8035 Ar8035 Firmware Cologne and 186 more

CVE-2025-47320

Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

9206 Lte Modem 9206 Lte Modem Firmware Apq8017 and 424 more

CVE-2025-21449

Buffer Over-read in WLAN Embedded SW

Transient DOS may occur while processing malformed length field in SSID IEs.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

315 5g Iot 315 5g Iot Firmware Apq8017 and 368 more

CVE-2025-47319

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8035 Ar8035 Firmware Fastconnect 6200 and 234 more