Vulnerabilities ›

CVE-2025-47359

High

Memory Corruption when multiple threads simultaneously access a memory free API.

CWE-416 — Weakness Type

                    Published: Feb 2, 2026                      ·  Modified: Feb 28, 2026                      ·  Source: NVD                

CVSS v3

7.8

🔗 NVD Official

📄 Description (English)

Memory Corruption when multiple threads simultaneously access a memory free API.

🤖 AI Executive Summary

CVE-2025-47359 is a high-severity memory corruption vulnerability (CVSS 7.8) caused by race conditions when multiple threads simultaneously access memory free APIs. This flaw can lead to use-after-free conditions, potentially enabling arbitrary code execution or denial of service attacks.

📄 Description (Arabic)

هذه الثغرة تنشأ من حالة تنافس حرجة حيث يمكن لخيوط متعددة الوصول إلى نفس موارد الذاكرة أثناء عملية التحرير، مما يسبب فساد الذاكرة. يمكن للمهاجمين استغلال هذا الضعف لتنفيذ كود عشوائي أو إحداث انهيار التطبيق.

🤖 ملخص تنفيذي (AI)

CVE-2025-47359 هو ثغرة فساد الذاكرة عالية الخطورة (CVSS 7.8) ناجمة عن حالات تنافس عندما تصل خيوط متعددة إلى واجهات برمجية لتحرير الذاكرة بشكل متزامن. يمكن لهذا الخلل أن يؤدي إلى حالات استخدام بعد التحرير، مما قد يمكّن من تنفيذ كود عشوائي أو هجمات الحرمان من الخدمة.

🤖 AI Intelligence Analysis Analyzed: May 2, 2026 05:20

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: high

🏢 Affected Saudi Sectors

banking telecom government energy

🎯 MITRE ATT&CK Techniques

T1190 T1499 T1203

⚖️ Saudi Risk Score (AI)

8.0

/ 10.0

🔧 Remediation Steps (English)

Immediately patch affected systems with vendor-provided security updates. Implement thread synchronization mechanisms (mutexes, semaphores) around memory deallocation operations. Conduct code review of multi-threaded components and apply memory safety tools (AddressSanitizer, Valgrind) during development and testing.

🔧 خطوات المعالجة (العربية)

قم بتصحيح الأنظمة المتأثرة فوراً بالتحديثات الأمنية المقدمة من المورد. طبق آليات مزامنة الخيوط (mutexes، semaphores) حول عمليات تحرير الذاكرة. أجرِ مراجعة الكود للمكونات متعددة الخيوط وطبق أدوات سلامة الذاكرة أثناء التطوير والاختبار.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

ECC-3.1 ECC-3.2 ECC-4.1

🔵 SAMA CSF

CC6.1 CC6.2 CC7.2

🟡 ISO 27001:2022

A.14.2.1 A.14.2.5 A.12.6.1

🔗 References & Sources 1

🔗

https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2026-bullet...

product-security@qualcomm.com

Vendor Advisory

📦 Affected Products / CPE 37 entries

qualcomm:qca6391_firmware:-

qualcomm:qca6420_firmware:-

qualcomm:qca6430_firmware:-

qualcomm:qcc2072_firmware:-

qualcomm:sc8380xp_firmware:-

qualcomm:sc8180x-ad_firmware:-

qualcomm:sc8180xp-ad_firmware:-

qualcomm:sc8180x-aaab_firmware:-

qualcomm:sc8180xp-acaf_firmware:-

qualcomm:sc8180x-acaf_firmware:-

qualcomm:sc8180xp-aaab_firmware:-

qualcomm:sc8280xp-abbb_firmware:-

qualcomm:wcd9340_firmware:-

qualcomm:wcd9341_firmware:-

qualcomm:wcd9378c_firmware:-

qualcomm:wcd9380_firmware:-

qualcomm:wcd9385_firmware:-

qualcomm:wsa8810_firmware:-

qualcomm:wsa8815_firmware:-

qualcomm:wsa8830_firmware:-

qualcomm:wsa8835_firmware:-

qualcomm:wsa8840_firmware:-

qualcomm:wsa8845_firmware:-

qualcomm:wsa8845h_firmware:-

qualcomm:x2000077_firmware:-

qualcomm:x2000086_firmware:-

qualcomm:x2000090_firmware:-

qualcomm:x2000092_firmware:-

qualcomm:x2000094_firmware:-

qualcomm:xg101002_firmware:-

qualcomm:xg101032_firmware:-

qualcomm:xg101039_firmware:-

qualcomm:aqt1000_firmware:-

qualcomm:fastconnect_6200_firmware:-

qualcomm:fastconnect_6800_firmware:-

qualcomm:fastconnect_6900_firmware:-

qualcomm:fastconnect_7800_firmware:-

📊 CVSS Score

7.8

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorL — Low / Local

Attack ComplexityL — Low / Local

Privileges RequiredL — Low / Local

User InteractionN — None / Network

ScopeU — Unchanged

ConfidentialityH — High

IntegrityH — High

AvailabilityH — High

📋 Quick Facts

Severity High

CVSS Score7.8

CWECWE-416

EPSS0.01%

Exploit No

Patch ✓ Yes

Published 2026-02-02

Source Feed nvd

🇸🇦 Saudi Risk Score

8.0

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

CWE-416

🏢 Vendor Advisories

🔗 https://docs.qualcomm.com/product/publicresources/se...

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

💬 Comments

Loading comments

CVE-2025-47359

💬 Comments

Introduce Yourself

Sign In Required