PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-47336 Qualcomm, Inc. CVE debrief

A memory corruption vulnerability exists while performing sensor register read operations, affecting various Qualcomm products. The CVE Program record and NVD vulnerability detail provide official information on this vulnerability. This vulnerability could lead to potential memory corruption and elevation of privileges. Qualcomm product users and administrators should assess exposure and apply patches as available. The CVE record was published on 2026-01-07T12:17:03.327Z and has not been modified since then.

Vendor
Qualcomm, Inc.
Product
Snapdragon
CVSS
MEDIUM 6.7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-01-07
Original CVE updated
2026-09-30
Advisory published
2026-01-07
Advisory updated
2026-09-30

Who should care

Qualcomm product users and administrators should assess exposure and apply patches as available. This includes reviewing Qualcomm's security bulletin for January 2026 and monitoring for any signs of exploitation or anomalies. Affected product deployments should be identified in managed environments and assigned an owner for follow-up. Compensating controls should be reviewed for exposed systems while remediation is

Why it matters

CVE-2025-47336 is a medium-severity vulnerability affecting various Qualcomm products. Users and administrators should assess exposure, review Qualcomm's security bulletin, and apply patches as available to prevent potential memory corruption and elevation of privileges.

  • Potential memory corruption leading to system instability
  • Possible elevation of privileges or unauthorized access
  • Required patching and configuration changes for affected products

Technical summary

Memory corruption while performing sensor register read operations affects various Qualcomm products, including WCD9378, WCD9395, WCN7750, WCN7860, WCN7861, WCN7880, WCN7881, WSA8830, WSA8832, WSA8835, WSA8840, WSA8845, WSA8845H, FastConnect 7800, QMP1000, SM8735, SM8750, and SM8750P.

Defensive priority

Medium priority for Qualcomm product users and administrators

Recommended defensive actions

  • Review and apply Qualcomm's security bulletin for January 2026
  • Inventory and assess exposure of Qualcomm products in your environment
  • Monitor for any signs of exploitation or anomalies

Evidence notes

The CVE Program record and NVD vulnerability detail provide official information on this vulnerability. Qualcomm provides a security bulletin for January 2026.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-47336 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-47336

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-47336 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-47336

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2026-bulletin.html

    [email protected] - Patch, Vendor Advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.