Cyber Posture

CVE-2025-47388

High

Published: 07 January 2026

Published
07 January 2026
Modified
27 January 2026
KEV Added
Patch
CVSS Score 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0002 6.3th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-47388 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Qualcomm Fastconnect 6200 Firmware. Its CVSS base score is 7.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 6.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-16 (Memory Protection) and SI-2 (Flaw Remediation).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploitation for Privilege Escalation (T1068). What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly implements memory protection mechanisms to prevent exploitation of memory corruption from unaligned page addresses passed to the DSP.

prevent

Mandates timely flaw remediation via patches outlined in Qualcomm's security bulletin for this specific memory corruption vulnerability.

prevent

Requires validation of inputs such as page starting addresses to ensure alignment and avoid triggering the unaligned memory corruption condition.

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Why these techniques?

Local memory corruption (CWE-120) enabling arbitrary code execution and system compromise maps directly to exploitation for privilege escalation on affected Qualcomm platforms.

Confidence: MEDIUM · MITRE ATT&CK Enterprise v18.1

NVD Description

Memory corruption while passing pages to DSP with an unaligned starting address.

Deeper analysisAI

CVE-2025-47388 is a memory corruption vulnerability classified under CWE-120, triggered while passing pages to the DSP with an unaligned starting address. It affects Qualcomm products, as documented in their January 2026 security bulletin.

The vulnerability carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating it can be exploited by a local attacker possessing low privileges. Exploitation requires low complexity and no user interaction, potentially resulting in high impacts to confidentiality, integrity, and availability, such as arbitrary code execution or system compromise within the affected scope.

Mitigation details and patches are outlined in Qualcomm's security bulletin available at https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2026-bulletin.html, published on 2026-01-07.

Details

CWE(s)

Affected Products

qualcomm
fastconnect 6200 firmware
all versions
qualcomm
fastconnect 6700 firmware
all versions
qualcomm
fastconnect 6900 firmware
all versions
qualcomm
fastconnect 7800 firmware
all versions
qualcomm
qcs610 firmware
all versions
qualcomm
qmp1000 firmware
all versions
qualcomm
video collaboration vc1 platform firmware
all versions
qualcomm
video collaboration vc3 platform firmware
all versions
qualcomm
sg6150 firmware
all versions
qualcomm
sg6150p firmware
all versions
+35 more product configuration(s) — see NVD for full list

CVEs Like This One

CVE-2025-47394Same product: Qualcomm Fastconnect 6200
CVE-2025-47396Same product: Qualcomm Fastconnect 6200
CVE-2025-47389Same product: Qualcomm Fastconnect 6200
CVE-2026-21382Same product: Qualcomm Fastconnect 6900
CVE-2025-47399Same product: Qualcomm Fastconnect 7800
CVE-2024-49843Same product: Qualcomm Fastconnect 6200
CVE-2024-49836Same product: Qualcomm Fastconnect 6900
CVE-2025-47385Same product: Qualcomm Fastconnect 6200
CVE-2024-49832Same product: Qualcomm Fastconnect 6900
CVE-2025-47407Same product: Qualcomm Fastconnect 6200

References