CVE-2025-47357

HighCVSS 7.8/10Last modified Oct 18, 2026

Description

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Nov 4, 2025
Last modified
Oct 18, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-473587.8Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.CVE-2025-473597.8Memory Corruption when multiple threads simultaneously access a memory free API.CVE-2025-47369.8A vulnerability was found in PHPGurukul Daily Expense Tracker 1.1 and classified as critical. Affected by this issue is some unknown functioCVE-2025-473607.8Memory corruption while processing client message during device management.CVE-2025-473617.8Memory corruption when triggering a subsystem crash with an out-of-range identifier.CVE-2025-473626.1Information disclosure while processing message from client with invalid payload.CVE-2025-473637.8Memory corruption when calculating oversized partition sizes without proper checks.CVE-2025-473647.8Memory corruption while calculating offset from partition start point.CVE-2025-473657.8Memory corruption while processing large input data from a remote source via a communication interface.CVE-2025-473667.8Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.CVE-2025-473677.8Memory corruption while accessing a buffer during IOCTL processing.CVE-2025-473687.8Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.
CVE-2025-47357: High severity, CVSS 7.8 | Vulnix