CVE-2025-47344

Q: What is the severity of CVE-2025-47344?

CVE-2025-47344 has a CVSS score of 6.7 (MEDIUM). This CVE describes a memory corruption vulnerability in Qualcomm sensor utility operations that could allow attackers to execute arbitrary code or cause denial of service. The vulnerability affects devices using Qualcomm chipsets with vulnerable sensor drivers. This primarily impacts mobile devices, IoT devices, and embedded systems using affected Qualcomm hardware.

6.7 MEDIUM

📋 TL;DR

This CVE describes a memory corruption vulnerability in Qualcomm sensor utility operations that could allow attackers to execute arbitrary code or cause denial of service. The vulnerability affects devices using Qualcomm chipsets with vulnerable sensor drivers. This primarily impacts mobile devices, IoT devices, and embedded systems using affected Qualcomm hardware.

💻 Affected Systems

Products:

Qualcomm chipsets with sensor processing units

Versions: Specific versions not detailed in reference; check Qualcomm advisory for affected chipset models

Operating Systems: Android, Linux-based embedded systems

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices using Qualcomm sensor drivers; vulnerability is in chipset firmware/drivers, not application software.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Remote code execution with kernel privileges leading to complete device compromise, data theft, or persistent backdoor installation.

🟠

Likely Case

Local privilege escalation from user to kernel space, potentially allowing app sandbox escape and access to sensitive sensor data.

🟢

If Mitigated

Denial of service through system crash or reboot if memory corruption is triggered but exploitation fails.

🌐 Internet-Facing: LOW - Requires local access or malicious app installation; not directly exploitable over network.

🏢 Internal Only: MEDIUM - Malicious apps or compromised users could exploit this for privilege escalation within the device.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires local access or malicious app; memory corruption vulnerabilities often require specific conditions to achieve reliable exploitation.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check device manufacturer updates for specific firmware versions

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2026-bulletin.html

Restart Required: Yes

Instructions:

1. Check with device manufacturer for firmware updates 2. Apply Qualcomm-provided patches through OEM updates 3. Reboot device after update installation

🔧 Temporary Workarounds

Restrict sensor permissions

android

Limit which apps can access sensor data to reduce attack surface

adb shell pm revoke <package_name> android.permission.BODY_SENSORS
adb shell pm revoke <package_name> android.permission.ACTIVITY_RECOGNITION

Disable unnecessary sensors

all

Turn off sensors not required for device operation

🧯 If You Can't Patch

Implement strict app vetting and only install from trusted sources
Use mobile device management (MDM) to enforce security policies and monitor for suspicious behavior

🔍 How to Verify

Check if Vulnerable:

Check device chipset model and firmware version against Qualcomm's affected products list

Check Version:

adb shell getprop ro.bootloader (Android) or cat /proc/cpuinfo (Linux)

Verify Fix Applied:

Verify firmware version has been updated to a version after the patch release date

📡 Detection & Monitoring

Log Indicators:

Kernel panic logs
Sensor service crashes
Unexpected memory access violations in system logs

Network Indicators:

Unusual sensor data exfiltration patterns

SIEM Query:

source="kernel" AND ("panic" OR "oops") AND "sensor"

📊 Metadata

CVE ID: CVE-2025-47344

CVSS v3 Score: 6.7 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-367

EPSS Score: 0.01% exploit probability (2.1th percentile)

Published: January 7, 2026

Last Updated: January 27, 2026

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2026-bulletin.html Vendor Advisory,Patch

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Csra6620 Firmware by Qualcomm

Csra6640 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qcm4490 Firmware by Qualcomm

Qcm5430 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcs4490 Firmware by Qualcomm

Qcs5430 Firmware by Qualcomm

Qcs615 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qcs8550 Firmware by Qualcomm

Qcs9100 Firmware by Qualcomm

Qmp1000 Firmware by Qualcomm

Robotics Rb2 Platform Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sm4635 Firmware by Qualcomm

Sm6650 Firmware by Qualcomm

Sm6650p Firmware by Qualcomm

Sm7635 Firmware by Qualcomm

Sm7635p Firmware by Qualcomm

Sm7675 Firmware by Qualcomm

Sm7675p Firmware by Qualcomm

Sm8635 Firmware by Qualcomm

Sm8635p Firmware by Qualcomm

Sm8650q Firmware by Qualcomm

Sm8735 Firmware by Qualcomm

Sm8750 Firmware by Qualcomm

Sm8750p Firmware by Qualcomm

Snapdragon 4 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 4 Gen 2 Mobile Platform Firmware by Qualcomm

Snapdragon 480 5g Mobile Platform Firmware by Qualcomm

Snapdragon 480\+ 5g Mobile Platform \(sm4350 Ac\) Firmware by Qualcomm

Snapdragon 662 Mobile Platform Firmware by Qualcomm

Snapdragon 680 4g Mobile Platform Firmware by Qualcomm

Snapdragon 685 4g Mobile Platform \(sm6225 Ad\) Firmware by Qualcomm

Snapdragon 695 5g Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 3 Mobile Platform Firmware by Qualcomm

Snapdragon Ar1 Gen 1 Platform \"luna1\" Firmware by Qualcomm

Snapdragon Ar1 Gen 1 Platform Firmware by Qualcomm

Snapdragon Ar2 Gen 1 Platform Firmware by Qualcomm

Sxr2230p Firmware by Qualcomm

Sxr2250p Firmware by Qualcomm

Sxr2330p Firmware by Qualcomm

Sxr2350p Firmware by Qualcomm

Video Collaboration Vc3 Platform Firmware by Qualcomm

Wcd9335 Firmware by Qualcomm

Wcd9370 Firmware by Qualcomm

Wcd9375 Firmware by Qualcomm

Wcd9378 Firmware by Qualcomm

Wcd9380 Firmware by Qualcomm

Wcd9385 Firmware by Qualcomm

Wcd9390 Firmware by Qualcomm

Wcd9395 Firmware by Qualcomm

Wcn3950 Firmware by Qualcomm

Wcn3988 Firmware by Qualcomm

Wcn6650 Firmware by Qualcomm

Wcn6740 Firmware by Qualcomm

Wcn6755 Firmware by Qualcomm

Wcn7750 Firmware by Qualcomm

Wcn7860 Firmware by Qualcomm

Wcn7861 Firmware by Qualcomm

Wcn7880 Firmware by Qualcomm

Wcn7881 Firmware by Qualcomm

Wsa8810 Firmware by Qualcomm

Wsa8815 Firmware by Qualcomm

Wsa8830 Firmware by Qualcomm