CVE-2025-47378: Qualcomm Cologne Firmware

High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days.

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Affected products

• Qualcomm Cologne Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm Lemans Au Lgit Firmware: affected versions not specified
• Qualcomm Lemansau Firmware: affected versions not specified
• Qualcomm Pandeiro Firmware: affected versions not specified
• Qualcomm QAM8255P Firmware: affected versions not specified
• Qualcomm QAMSRV1H Firmware: affected versions not specified
• Qualcomm QAMSRV1M Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6595 Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCA6797AQ Firmware: affected versions not specified
• Qualcomm QLN1083BD Firmware: affected versions not specified
• Qualcomm QLN1086BD Firmware: affected versions not specified
• Qualcomm QPA1083BD Firmware: affected versions not specified
• Qualcomm QPA1086BD Firmware: affected versions not specified
• Qualcomm QXM1083 Firmware: affected versions not specified
• Qualcomm QXM1086 Firmware: affected versions not specified
• Qualcomm QXM1093 Firmware: affected versions not specified
• Qualcomm QXM1094 Firmware: affected versions not specified
• and 49 more

Published 2026-03-02. Last modified 2026-06-17.