Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Qualcomm
Sm6475 Firmware

qualcomm sm6475 firmware Vulnerabilities: CVEs, CISA KEV & Security Advisories

18 CVEs

1 in CISA KEV

qualcomm sm6475 firmware Vulnerabilities

CVE security advisories and vulnerability history for sm6475 firmware by qualcomm.

18

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

1

Public exploits

With known exploit

7.4

Avg CVSS

2025–2026

Last updated February 2, 2026

Overview

qualcomm sm6475 firmware has 18 published CVE records since 2025, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting qualcomm sm6475 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of qualcomm sm6475 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High13

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of qualcomm sm6475 firmware's CVEs is confirmed exploited in the wild.

Public exploits

1

One of qualcomm sm6475 firmware's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every qualcomm sm6475 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for qualcomm sm6475 firmware; the CVEs below apply to the product without a version pin.

18 CVEs

Sort

Exposed Dangerous Method or Function in HLOS
CVE-2025-47366CWE-749
High · CVSS 7.1
EPSS 0.0% (0th pct)2026-02-02
Double Free in Graphics
CVE-2025-47396CWE-415
High · CVSS 7.8
EPSS 0.0% (4th pct)2026-01-06
Buffer Copy Without Checking Size of Input in DSP Service
CVE-2025-47394CWE-120
High · CVSS 7.8
EPSS 0.0% (4th pct)2026-01-06
Buffer Copy without Checking Size of Input in DSP Service
CVE-2025-47388CWE-120
High · CVSS 7.8
EPSS 0.0% (4th pct)2026-01-06
Use of Uninitialized Variable in HLOS
CVE-2025-47348CWE-457
High · CVSS 7.8
EPSS 0.0% (4th pct)2026-01-06
Out-of-bounds Write in HLOS
CVE-2025-47346CWE-787
High · CVSS 7.8
EPSS 0.0% (4th pct)2026-01-06
Reusing a Nonce, Key Pair in Encryption in Automotive Platform
CVE-2025-47345CWE-323
High · CVSS 8.4
EPSS 0.0% (2th pct)2026-01-06
Use After Free in HLOS
CVE-2025-47339CWE-416
High · CVSS 7.8
EPSS 0.0% (4th pct)2026-01-06
Buffer Copy Without Checking Size of Input in Camera Driver
CVE-2025-47334CWE-120
Medium · CVSS 6.7
EPSS 0.0% (3th pct)2026-01-06
Use After Free in HLOS
CVE-2025-47333CWE-416
Medium · CVSS 6.6
EPSS 0.0% (5th pct)2026-01-06
Buffer Over-read in Video
CVE-2025-47331CWE-126
Medium · CVSS 6.1
EPSS 0.0% (2th pct)2026-01-06
Buffer Over-read in Video
CVE-2025-47330CWE-126
Medium · CVSS 5.5
EPSS 0.0% (3th pct)2026-01-06
Integer Overflow or Wraparound in Audio
CVE-2025-47323CWE-190
High · CVSS 7.8
EPSS 0.0% (4th pct)2025-12-18
Buffer Copy Without Checking Size of Input in Core Services
CVE-2025-47321CWE-120
High · CVSS 7.8
EPSS 0.0% (4th pct)2025-12-18
Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
CVE-2025-47319CWE-497
Medium · CVSS 6.7
EPSS 0.0% (2th pct)2025-12-18
Use After Free in DSP Service
CVE-2025-47354CWE-416
High · CVSS 7.8
EPSS 0.0% (5th pct)2025-10-09
Buffer Over-read in BT Controller
CVE-2025-47317CWE-126
High · CVSS 7.8
EPSS 0.0% (5th pct)2025-09-24
Use After Free in Graphics
CVE-2025-27038
CISA KEV
Public exploit
CWE-416
Added to CISA KEV 2025-06-03
High · CVSS 7.7
EPSS 1.4% (81th pct)2025-06-03

Common weakness types

The CWE weakness categories most often found in qualcomm sm6475 firmware CVEs. Follow any weakness for its full explanation.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')4 CVEs
CWE-416Use After Free4 CVEs
CWE-126Buffer Over-read3 CVEs
CWE-323Reusing a Nonce, Key Pair in Encryption1 CVE
CWE-415Double Free1 CVE
CWE-787Out-of-bounds Write1 CVE
CWE-190Integer Overflow or Wraparound1 CVE
CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere1 CVE

Disclosure activity by year

How many qualcomm sm6475 firmware CVEs were published each year.

2025

6

2026

12

Other qualcomm products

Browse vulnerabilities for other products by qualcomm.

wcd93801,205 CVEs wcd9380 firmware1,171 CVEs wsa88301,137 CVEs wsa88351,136 CVEs wcd93851,116 CVEs qca6574au1,105 CVEs wsa8830 firmware1,105 CVEs wsa8835 firmware1,104 CVEs

All qualcomm vulnerabilities

Frequently asked questions

Common questions about qualcomm sm6475 firmware vulnerabilities.

How many CVEs does qualcomm sm6475 firmware have?

qualcomm sm6475 firmware has 18 published CVE records since 2025.

How many qualcomm sm6475 firmware CVEs are in CISA KEV?

Yes — 1 of qualcomm sm6475 firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for qualcomm sm6475 firmware vulnerabilities?

Yes — 1 of qualcomm sm6475 firmware's CVEs have a known public exploit.

What are the most common weakness types in qualcomm sm6475 firmware CVEs?

qualcomm sm6475 firmware's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-416 (Use After Free), CWE-126 (Buffer Over-read), CWE-323 (Reusing a Nonce, Key Pair in Encryption).

What is the average severity of qualcomm sm6475 firmware CVEs?

The average CVSS base score across qualcomm sm6475 firmware's scored CVEs is 7.4.

References

All qualcomm vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track qualcomm sm6475 firmware vulnerabilities

Monitor new qualcomm sm6475 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References