medium5.5
CVE-2025-47369
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Impact
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Ar8035 Firmware | All versions |
| Qualcomm | Csra6620 Firmware | All versions |
| Qualcomm | Csra6640 Firmware | All versions |
| Qualcomm | Fastconnect 6200 Firmware | All versions |
| Qualcomm | Fastconnect 6700 Firmware | All versions |
| Qualcomm | Snapdragon W5\+ Gen 1 Wearable Platform Firmware | All versions |
| Qualcomm | Snapdragon X12 Lte Modem Firmware | All versions |
| Qualcomm | Snapdragon X55 5g Modem-Rf System Firmware | All versions |
| Qualcomm | Snapdragon X65 5g Modem-Rf System Firmware | All versions |
| Qualcomm | Snapdragon Xr2 5g Platform Firmware | All versions |
| Qualcomm | Snapdragon Xr2\+ Gen 1 Platform Firmware | All versions |
| Qualcomm | Ssg2115p Firmware | All versions |