Findings

CVE-2025-47378

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Published Mar 2, 2026 · updated Jun 17, 2026 · qualcomm cologne firmware

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 2, 2026 · NIST NVD

    Detected

    Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

Affected

  • cpe qualcomm/cologne firmwareversion unspecified
  • cpe qualcomm/fastconnect 6700 firmwareversion unspecified
  • cpe qualcomm/fastconnect 6800 firmwareversion unspecified
  • cpe qualcomm/fastconnect 6900 firmwareversion unspecified
  • cpe qualcomm/fastconnect 7800 firmwareversion unspecified
  • cpe qualcomm/lemans au lgit firmwareversion unspecified
  • cpe qualcomm/lemansau firmwareversion unspecified
  • cpe qualcomm/pandeiro firmwareversion unspecified
  • cpe qualcomm/qam8255p firmwareversion unspecified
  • cpe qualcomm/qamsrv1h firmwareversion unspecified
  • cpe qualcomm/qamsrv1m firmwareversion unspecified
  • cpe qualcomm/qca6391 firmwareversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-47378

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-47378

    Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

    nvd.nist.gov

References