CVE-2025-47389: Qualcomm AR8035 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm Cologne Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm Fwa Gen 3 Ultra Firmware: affected versions not specified
• Qualcomm g2 Gen 1 Firmware: affected versions not specified
• Qualcomm Iq-615 Firmware: affected versions not specified
• Qualcomm Iq-8275 Firmware: affected versions not specified
• Qualcomm Iq-8300 Firmware: affected versions not specified
• Qualcomm Iq-9075 Firmware: affected versions not specified
• Qualcomm Iq-9100 Firmware: affected versions not specified
• Qualcomm Lemans Au Lgit Firmware: affected versions not specified
• Qualcomm Lemansau Firmware: affected versions not specified
• Qualcomm Milos Firmware: affected versions not specified
• Qualcomm Monaco IoT Firmware: affected versions not specified
• Qualcomm Netrani Firmware: affected versions not specified
• Qualcomm Orne Firmware: affected versions not specified
• Qualcomm PALAWAN25 Firmware: affected versions not specified
• Qualcomm Pandeiro Firmware: affected versions not specified
• Qualcomm QAM8255P Firmware: affected versions not specified
• and 156 more

Published 2026-04-06. Last modified 2026-10-07.