CVE-2025-47356CWE-415

CVE-2025-47356

High ยท published January 7, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

โšก A memory corruption flaw arises when multiple threads fight over shared resources! It's like a chaotic buffet line where everyone grabs for the same dish โ€” things are bound to get messy! ๐Ÿฝ๏ธ Picture a busy restaurant kitchen during the dinner rush, where multiple chefs are trying to create the same dish using the same ingredients โ€” without coordination, some might end up with burnt food or worse, accidentally ruin the entire meal! This vulnerability operates similarly, where threads can interfere with each other's work, resulting in unexpected outcomes. If exploited, this memory corruption could allow an attacker to crash the application or even execute arbitrary code, which could compromise the entire system. It's like ordering a meal and finding out that someone else has already eaten half your dish โ€” not only a mess but potentially harmful!

Put simply

Picture a busy restaurant kitchen during the dinner rush, where multiple chefs are trying to create the same dish using the same ingredients โ€” without coordination, some might end up with burnt food or worse, accidentally ruin the entire meal! This vulnerability operates similarly, where threads can interfere with each other's work, resulting in unexpected outcomes. This vulnerability occurs when multiple threads concurrently access and modify shared memory resources without proper synchronization, leading to unpredictable behavior and potential system crashes.

What to do

If exploited, this memory corruption could allow an attacker to crash the application or even execute arbitrary code, which could compromise the entire system. It's like ordering a meal and finding out that someone else has already eaten half your dish โ€” not only a mess but potentially harmful! To mitigate this vulnerability, ensure that all access to shared resources is properly synchronized using mutexes or other locking mechanisms. Regularly review and update your threading models, and consider implementing thorough testing to identify potential race conditions. Patch your environment as soon as updates are available! You've got this! Follow these steps, and your system will be as reliable as a well-managed kitchen! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
7.8 ยท HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00081 ยท 0.2th percentile
Weakness
CWE-415 ยท Double Free
Published
2026-01-07T17:17Z
Affected products (19)
ProductVersionsFixed in
qualcomm/cologne_firmwareall versionsโ€”
qualcomm/fastconnect_6900_firmwareall versionsโ€”
qualcomm/fastconnect_7800_firmwareall versionsโ€”
qualcomm/qca0000_firmwareall versionsโ€”
qualcomm/sc8380xp_firmwareall versionsโ€”
qualcomm/wcd9378c_firmwareall versionsโ€”
qualcomm/wcd9380_firmwareall versionsโ€”
qualcomm/wcd9385_firmwareall versionsโ€”
qualcomm/wsa8840_firmwareall versionsโ€”
qualcomm/wsa8845_firmwareall versionsโ€”
qualcomm/wsa8845h_firmwareall versionsโ€”
qualcomm/x2000077_firmwareall versionsโ€”
qualcomm/x2000086_firmwareall versionsโ€”
qualcomm/x2000090_firmwareall versionsโ€”
qualcomm/x2000092_firmwareall versionsโ€”
qualcomm/x2000094_firmwareall versionsโ€”
qualcomm/xg101002_firmwareall versionsโ€”
qualcomm/xg101032_firmwareall versionsโ€”
qualcomm/xg101039_firmwareall versionsโ€”
References (1)
EPSS history
Timeline
  • 06 JAN 22:48Z
    Double Free in Video
    cvelistv5