CVE-2025-47378

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

State: Published
Severity: 7.1 High
Published: Mar 2, 2026
Updated: Mar 3, 2026
Reserved: May 6, 2025

Description

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	qualcomm

Weaknesses

CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	CologneAffected FastConnect 6700Affected FastConnect 6800Affected FastConnect 6900Affected FastConnect 7800Affected LeMans_AU_LGITAffected LeMansAUAffected PandeiroAffected QAM8255PAffected QAMSRV1HAffected QAMSRV1MAffected QCA6391Affected QCA6595Affected QCA6595AUAffected QCA6696Affected QCA6698AQAffected QCA6797AQAffected QLN1083BDAffected QLN1086BDAffected QPA1083BDAffected QPA1086BDAffected QXM1083Affected QXM1086Affected QXM1093Affected QXM1094Affected and 49 more versions

Product

Versions

SnapdragonQualcomm, Inc.

CologneAffected
FastConnect 6700Affected
FastConnect 6800Affected
FastConnect 6900Affected
FastConnect 7800Affected
LeMans_AU_LGITAffected
LeMansAUAffected
PandeiroAffected
QAM8255PAffected
QAMSRV1HAffected
QAMSRV1MAffected
QCA6391Affected
QCA6595Affected
QCA6595AUAffected
QCA6696Affected
QCA6698AQAffected
QCA6797AQAffected
QLN1083BDAffected
QLN1086BDAffected
QPA1083BDAffected
QPA1086BDAffected
QXM1083Affected
QXM1086Affected
QXM1093Affected
QXM1094Affected
and 49 more versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.