CVE-2025-47382

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while loading an invalid firmware in boot loader.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonFastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; QAM8255P; QAM8295P; QAM8620P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6574; QCA6574A; QCA6574AU; QCA6595; QCA6595AU; QCA6688AQ; QCA6696; QCA6698AQ; QCA6797AQ

References

Timeline

Published
Dec 18, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-473837.2Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.CVE-2025-473846.5Transient DOS when MAC configures config id greater than supported maximum value.CVE-2025-473857.8Memory Corruption when accessing trusted execution environment without proper privilege check.CVE-2025-473867.8Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.CVE-2025-473877.8Memory Corruption when processing IOCTLs for JPEG data without verification.CVE-2025-473887.8Memory corruption while passing pages to DSP with an unaligned starting address.CVE-2025-473897.8Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.CVE-2025-47399.8A vulnerability was found in projectworlds Hospital Database Management System 1.0. It has been classified as critical. This affects an unknCVE-2025-473907.8Memory corruption while preprocessing IOCTL request in JPEG driver.CVE-2025-473917.8Memory corruption while processing a frame request from user.CVE-2025-473928.8Memory corruption when decoding corrupted satellite data files with invalid signature offsets.CVE-2025-473937.8Memory corruption when accessing resources in kernel driver.
CVE-2025-47382: High severity, CVSS 7.8 | Vulnix