CVE-2025-47319

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N

Weakness enumeration

CWE-497

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; QAM8255P; QAM8295P; QAM8620P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6174A; QCA6574; QCA6574A; QCA6574AU; QCA6584AU; QCA6595; QCA6595AU; QCA6678AQ

References

Timeline

Published
Dec 18, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-47328.8A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown codCVE-2025-473207.8Memory corruption while processing MFC channel configuration during music playback.CVE-2025-473217.8Memory corruption while copying packets received from unix clients.CVE-2025-473227.8Memory corruption while handling IOCTL calls to set mode.CVE-2025-473237.8Memory corruption while routing GPR packets between user and root when handling large data packet.CVE-2025-473247.5Information disclosure while accessing and modifying the PIB file of a remote device via powerline.CVE-2025-473255.5Information disclosure while processing system calls with invalid parameters.CVE-2025-473267.5Transient DOS while handling command data during power control processing.CVE-2025-473277.8Memory corruption while encoding the image data.CVE-2025-473287.5Transient DOS while processing power control requests with invalid antenna or stream values.CVE-2025-473297.8Memory corruption while handling invalid inputs in application info setup.CVE-2025-47338.8A vulnerability, which was classified as critical, has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This issue affects so
CVE-2025-47319: Medium severity, CVSS 6.7 | Vulnix