Memory Corruption in JPEG Driver Affects Qualcomm Products
CVE-2025-47390

7.8HIGH

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
6 April 2026

What is CVE-2025-47390?

A memory corruption vulnerability exists within the IOCTL request processing in Qualcomm's JPEG driver. This flaw could potentially allow an attacker to exploit this weakness, leading to unforeseen consequences such as system instability or unauthorized access. End users of affected Qualcomm products should remain vigilant and apply the latest security patches to mitigate risks associated with this vulnerability.

Affected Version(s)

Snapdragon Snapdragon Compute Cologne

Snapdragon Snapdragon Compute FastConnect 6700

Snapdragon Snapdragon Compute FastConnect 6900

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.