Qualcomm SM6475 Firmware vulnerabilities

18 CVEs affecting Qualcomm SM6475 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-47366, published 2026-02-02.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-27038: Qualcomm Multiple Chipsets Use-After-Free Vulnerability, published 2025-06-03. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2025-06-03. EPSS: 1% chance of exploitation in the next 30 days. Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
• CVE-2025-47366, published 2026-02-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
• CVE-2025-47319, published 2025-12-18. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
• CVE-2025-47323, published 2025-12-18. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while routing GPR packets between user and root when handling large data packet.
• CVE-2025-47317, published 2025-09-24. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
• CVE-2025-47354, published 2025-10-09. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while allocating buffers in DSP service.
• CVE-2025-47396, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption occurs when a secure application is launched on a device with insufficient memory.
• CVE-2025-47334, published 2026-01-07. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing shared command buffer packet between camera userspace and kernel.
• CVE-2025-47394, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
• CVE-2025-47388, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while passing pages to DSP with an unaligned starting address.

Latest

• CVE-2025-47348, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing identity credential operations in the trusted application.
• CVE-2025-47346, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing a secure logging command in the trusted application.
• CVE-2025-47345, published 2026-01-07. High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue may occur while encrypting license data.
• CVE-2025-47339, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while deinitializing a HDCP session.
• CVE-2025-47333, published 2026-01-07. Medium severity, CVSS 6.6. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while handling buffer mapping operations in the cryptographic driver.