Qualcomm QCC2072 Firmware vulnerabilities

15 CVEs affecting Qualcomm QCC2072 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-47359, published 2026-02-02.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-47359, published 2026-02-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when multiple threads simultaneously access a memory free API.
• CVE-2025-47358, published 2026-02-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.
• CVE-2025-27045, published 2025-10-09. Medium severity, CVSS 6.1. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure while processing batch command execution in Video driver.
• CVE-2025-47367, published 2025-11-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while accessing a buffer during IOCTL processing.
• CVE-2025-47352, published 2025-11-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing audio streaming operations.
• CVE-2025-47355, published 2025-10-09. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while invoking remote procedure IOCTL calls.
• CVE-2025-47349, published 2025-10-09. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing an escape call.
• CVE-2025-47341, published 2025-10-09. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. memory corruption while processing an image encoding completion event.
• CVE-2025-47340, published 2025-10-09. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing IOCTL call to get the mapping.
• CVE-2025-47338, published 2025-10-09. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing escape commands from userspace.

Latest

• CVE-2025-47380, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while preprocessing IOCTLs in sensors.