CVE-2025-47372
HIGH EPSS 1.1%
Published Dec 18, 20256mo ago · Modified Jun 17, 20262w ago
8.4 CVSS 3.1
Published Dec 18, 2025 6mo ago
Last Modified Jun 17, 2026 2w ago
Description
Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
1.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 2
CWE-120
CWE-787 Out-of-bounds Write Memory Safety
Affected Products 46
| Vendor | Product | Version | Range |
|---|---|---|---|
| qualcomm | qam8255p_firmware | * | any |
| qualcomm | qam8255p | * | any |
| qualcomm | qam8620p_firmware | * | any |
| qualcomm | qam8620p | * | any |
| qualcomm | qam8650p_firmware | * | any |
| qualcomm | qam8650p | * | any |
| qualcomm | qam8775p_firmware | * | any |
| qualcomm | qam8775p | * | any |
| qualcomm | qamsrv1h_firmware | * | any |
| qualcomm | qamsrv1h | * | any |
| qualcomm | qamsrv1m_firmware | * | any |
| qualcomm | qamsrv1m | * | any |
| qualcomm | qca6595_firmware | * | any |
| qualcomm | qca6595 | * | any |
| qualcomm | qca6595au_firmware | * | any |
| qualcomm | qca6595au | * | any |
| qualcomm | qca6678aq_firmware | * | any |
| qualcomm | qca6678aq | * | any |
| qualcomm | qca6696_firmware | * | any |
| qualcomm | qca6696 | * | any |
| qualcomm | qca6698aq_firmware | * | any |
| qualcomm | qca6698aq | * | any |
| qualcomm | qca6797aq_firmware | * | any |
| qualcomm | qca6797aq | * | any |
| qualcomm | sa7255p_firmware | * | any |
| qualcomm | sa7255p | * | any |
| qualcomm | sa7775p_firmware | * | any |
| qualcomm | sa7775p | * | any |
| qualcomm | sa8255p_firmware | * | any |
| qualcomm | sa8255p | * | any |
| qualcomm | sa8620p_firmware | * | any |
| qualcomm | sa8620p | * | any |
| qualcomm | sa8650p_firmware | * | any |
| qualcomm | sa8650p | * | any |
| qualcomm | sa8770p_firmware | * | any |
| qualcomm | sa8770p | * | any |
| qualcomm | sa8775p_firmware | * | any |
| qualcomm | sa8775p | * | any |
| qualcomm | sa9000p_firmware | * | any |
| qualcomm | sa9000p | * | any |
| qualcomm | srv1h_firmware | * | any |
| qualcomm | srv1h | * | any |
| qualcomm | srv1l_firmware | * | any |
| qualcomm | srv1l | * | any |
| qualcomm | srv1m_firmware | * | any |
| qualcomm | srv1m | * | any |
References 1
- docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.