Skip to content
OpenAdvisories
High · 7.1 CVE-2025-47378 EUVD-2025-208187GHSA-hpq4-rxrf-q4qg

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Published Mar 2, 2026 · Updated Mar 3, 2026 · Assigned by qualcomm

Description

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon Cologne, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, LeMans_AU_LGIT, LeMansAU, Pandeiro, QAM8255P, QAMSRV1H, QAMSRV1M, QCA6391, QCA6595, QCA6595AU, QCA6696, QCA6698AQ, QCA6797AQ, QLN1083BD, QLN1086BD, QPA1083BD, QPA1086BD, QXM1083, QXM1086, QXM1093, QXM1094, QXM1095, QXM… —

Advisories 2

References