Use After Free in Camera Driver_CVE-2025-47374

6.5 / 10

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H

Description

Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

Basic Information

ID CVE-2025-47374

Source qualcomm

Published Apr 6, 2026 at 15:33

Modified Apr 6, 2026 at 16:32

Affected Product

Vendor Qualcomm, Inc.

Product Snapdragon

Version FastConnect 6900

Affected Versions Qualcomm, Inc. Snapdragon FastConnect 6900
Qualcomm, Inc. Snapdragon FastConnect 7800
Qualcomm, Inc. Snapdragon Pandeiro
Qualcomm, Inc. Snapdragon QLN1083BD
Qualcomm, Inc. Snapdragon QLN1086BD
Qualcomm, Inc. Snapdragon QPA1083BD
Qualcomm, Inc. Snapdragon QPA1086BD
Qualcomm, Inc. Snapdragon QXM1083
Qualcomm, Inc. Snapdragon QXM1086
Qualcomm, Inc. Snapdragon QXM1093
Qualcomm, Inc. Snapdragon QXM1094
Qualcomm, Inc. Snapdragon QXM1095
Qualcomm, Inc. Snapdragon QXM1096
Qualcomm, Inc. Snapdragon SAR1165P
Qualcomm, Inc. Snapdragon SAR2130P
Qualcomm, Inc. Snapdragon Snapdragon AR1 Gen 1 Platform
Qualcomm, Inc. Snapdragon Snapdragon AR1+ Gen 1 Platform
Qualcomm, Inc. Snapdragon SXR2230P
Qualcomm, Inc. Snapdragon SXR2250P
Qualcomm, Inc. Snapdragon SXR2330P
Qualcomm, Inc. Snapdragon SXR2350P
Qualcomm, Inc. Snapdragon WCD9380
Qualcomm, Inc. Snapdragon WCD9385
Qualcomm, Inc. Snapdragon WCN7860
Qualcomm, Inc. Snapdragon WCN7861
Qualcomm, Inc. Snapdragon WSA8830
Qualcomm, Inc. Snapdragon WSA8832
Qualcomm, Inc. Snapdragon WSA8835
Qualcomm, Inc. Snapdragon XRV7209
Qualcomm, Inc. Snapdragon XRV9209

CWE Classification

CWE-416

References

docs.qualcomm.com /product/publicresources/securitybulletin/april-2026-bulletin.html

{
    "lastseen": "",
    "description": "Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.",
    "published": "2026-04-06T15:33:39.322Z",
    "modified": "2026-04-06T16:32:18.294Z",
    "type": "cve",
    "title": "Use After Free in Camera Driver",
    "source": "qualcomm",
    "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html",
    "id": "CVE-2025-47374",
    "bulletinFamily": "",
    "cwe": [
        "CWE-416"
    ],
    "cvelist": null,
    "sourceData": "Qualcomm, Inc. Snapdragon FastConnect 6900\nQualcomm, Inc. Snapdragon FastConnect 7800\nQualcomm, Inc. Snapdragon Pandeiro\nQualcomm, Inc. Snapdragon QLN1083BD\nQualcomm, Inc. Snapdragon QLN1086BD\nQualcomm, Inc. Snapdragon QPA1083BD\nQualcomm, Inc. Snapdragon QPA1086BD\nQualcomm, Inc. Snapdragon QXM1083\nQualcomm, Inc. Snapdragon QXM1086\nQualcomm, Inc. Snapdragon QXM1093\nQualcomm, Inc. Snapdragon QXM1094\nQualcomm, Inc. Snapdragon QXM1095\nQualcomm, Inc. Snapdragon QXM1096\nQualcomm, Inc. Snapdragon SAR1165P\nQualcomm, Inc. Snapdragon SAR2130P\nQualcomm, Inc. Snapdragon Snapdragon AR1 Gen 1 Platform\nQualcomm, Inc. Snapdragon Snapdragon AR1+ Gen 1 Platform\nQualcomm, Inc. Snapdragon SXR2230P\nQualcomm, Inc. Snapdragon SXR2250P\nQualcomm, Inc. Snapdragon SXR2330P\nQualcomm, Inc. Snapdragon SXR2350P\nQualcomm, Inc. Snapdragon WCD9380\nQualcomm, Inc. Snapdragon WCD9385\nQualcomm, Inc. Snapdragon WCN7860\nQualcomm, Inc. Snapdragon WCN7861\nQualcomm, Inc. Snapdragon WSA8830\nQualcomm, Inc. Snapdragon WSA8832\nQualcomm, Inc. Snapdragon WSA8835\nQualcomm, Inc. Snapdragon XRV7209\nQualcomm, Inc. Snapdragon XRV9209",
    "sourceHref": "",
    "cvss": {
        "score": 6.5,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Snapdragon",
    "version": "FastConnect 6900",
    "vendor": "Qualcomm, Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}