CVE-2025-47378

High

Description

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

SeverityHigh
CVSS7.1
Exploit probability—
ProductQualcomm Cologne Firmware
PublishedMar 2, 2026
First seenMar 2, 2026
Weakness typeCWE-497CWE-497

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm cologne_firmwareNo range specified—
qualcomm fastconnect_6700_firmwareNo range specified—
qualcomm fastconnect_6800_firmwareNo range specified—
qualcomm fastconnect_6900_firmwareNo range specified—
qualcomm fastconnect_7800_firmwareNo range specified—
qualcomm lemans_au_lgit_firmwareNo range specified—
qualcomm lemansau_firmwareNo range specified—
qualcomm pandeiro_firmwareNo range specified—
qualcomm qam8255p_firmwareNo range specified—
qualcomm qamsrv1h_firmwareNo range specified—
qualcomm qamsrv1m_firmwareNo range specified—
qualcomm qca6391_firmwareNo range specified—
qualcomm qca6595_firmwareNo range specified—
qualcomm qca6595au_firmwareNo range specified—
qualcomm qca6696_firmwareNo range specified—
qualcomm qca6698aq_firmwareNo range specified—
qualcomm qca6797aq_firmwareNo range specified—
qualcomm qln1083bd_firmwareNo range specified—
qualcomm qln1086bd_firmwareNo range specified—
qualcomm qpa1083bd_firmwareNo range specified—
qualcomm qpa1086bd_firmwareNo range specified—
qualcomm qxm1083_firmwareNo range specified—
qualcomm qxm1086_firmwareNo range specified—
qualcomm qxm1093_firmwareNo range specified—
qualcomm qxm1094_firmwareNo range specified—
qualcomm qxm1095_firmwareNo range specified—
qualcomm qxm1096_firmwareNo range specified—
qualcomm sa7255p_firmwareNo range specified—
qualcomm sa7775p_firmwareNo range specified—
qualcomm sa8255p_firmwareNo range specified—
qualcomm sa8620p_firmwareNo range specified—
qualcomm sa8770p_firmwareNo range specified—
qualcomm sa9000p_firmwareNo range specified—
qualcomm sar1165p_firmwareNo range specified—
qualcomm sar1250p_firmwareNo range specified—
qualcomm sar2130p_firmwareNo range specified—
qualcomm sar2230p_firmwareNo range specified—
qualcomm sd865_5g_firmwareNo range specified—
qualcomm snapdragon_8_elite_gen_5_firmwareNo range specified—
qualcomm snapdragon_865_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_865\+_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_870_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_ar1_gen_1_platform_firmwareNo range specified—
qualcomm snapdragon_ar1\+_gen_1_platform_firmwareNo range specified—
qualcomm snapdragon_x55_5g_modem-rf_system_firmwareNo range specified—
qualcomm snapdragon_xr2_5g_platform_firmwareNo range specified—
qualcomm snapdragon_xr2\+_gen_1_platform_firmwareNo range specified—
qualcomm srv1h_firmwareNo range specified—
qualcomm srv1m_firmwareNo range specified—
qualcomm sxr2230p_firmwareNo range specified—
qualcomm sxr2250p_firmwareNo range specified—
qualcomm wcd9378c_firmwareNo range specified—
qualcomm wcd9380_firmwareNo range specified—
qualcomm wcd9385_firmwareNo range specified—
qualcomm wcd9395_firmwareNo range specified—
qualcomm wcn3950_firmwareNo range specified—
qualcomm wcn7860_firmwareNo range specified—
qualcomm wcn7861_firmwareNo range specified—
qualcomm wsa8810_firmwareNo range specified—
qualcomm wsa8815_firmwareNo range specified—
qualcomm wsa8830_firmwareNo range specified—
qualcomm wsa8832_firmwareNo range specified—
qualcomm wsa8835_firmwareNo range specified—
qualcomm wsa8840_firmwareNo range specified—
qualcomm wsa8845_firmwareNo range specified—
qualcomm wsa8845h_firmwareNo range specified—
qualcomm x2000077_firmwareNo range specified—
qualcomm x2000086_firmwareNo range specified—
qualcomm x2000090_firmwareNo range specified—
qualcomm x2000092_firmwareNo range specified—
qualcomm x2000094_firmwareNo range specified—
qualcomm xg101002_firmwareNo range specified—
qualcomm xg101032_firmwareNo range specified—
qualcomm xg101039_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.