Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2025-47372 Details
Description
Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.
A critical memory corruption vulnerability has been identified in the boot process of various chipsets, including several Snapdragon mobile platforms and automotive processors. The issue arises when a corrupted ELF image, containing an oversized file size, is read into a buffer without proper authentication, potentially leading to arbitrary code execution or other malicious actions.
Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the December 2025 Qualcomm Security Bulletin.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Dec 18, 2025Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
| CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| qualcomm qam8255p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8255p | All versions |
CPE
Remediation
| |
| qualcomm qam8620p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8620p | All versions |
CPE
Remediation
| |
| qualcomm qam8650p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8650p | All versions |
CPE
Remediation
| |
| qualcomm qam8775p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8775p | All versions |
CPE
Remediation
| |
| qualcomm qamsrv1h firmware | All versions |
CPE
Remediation
| |
| qualcomm qamsrv1h | All versions |
CPE
Remediation
| |
| qualcomm qamsrv1m firmware | All versions |
CPE
Remediation
| |
| qualcomm qamsrv1m | All versions |
CPE
Remediation
| |
| qualcomm qca6595 firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6595 | All versions |
CPE
Remediation
| |
| qualcomm qca6595au firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6595au | All versions |
CPE
Remediation
| |
| qualcomm qca6678aq firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6678aq | All versions |
CPE
Remediation
| |
| qualcomm qca6696 firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6696 | All versions |
CPE
Remediation
| |
| qualcomm qca6698aq firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6698aq | All versions |
CPE
Remediation
| |
| qualcomm qca6797aq firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6797aq | All versions |
CPE
Remediation
| |
| qualcomm sa7255p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa7255p | All versions |
CPE
Remediation
| |
| qualcomm sa7775p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa7775p | All versions |
CPE
Remediation
| |
| qualcomm sa8255p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8255p | All versions |
CPE
Remediation
| |
| qualcomm sa8620p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8620p | All versions |
CPE
Remediation
| |
| qualcomm sa8650p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8650p | All versions |
CPE
Remediation
| |
| qualcomm sa8770p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8770p | All versions |
CPE
Remediation
| |
| qualcomm sa8775p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8775p | All versions |
CPE
Remediation
| |
| qualcomm sa9000p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa9000p | All versions |
CPE
Remediation
| |
| qualcomm srv1h firmware | All versions |
CPE
Remediation
| |
| qualcomm srv1h | All versions |
CPE
Remediation
| |
| qualcomm srv1l firmware | All versions |
CPE
Remediation
| |
| qualcomm srv1l | All versions |
CPE
Remediation
| |
| qualcomm srv1m firmware | All versions |
CPE
Remediation
| |
| qualcomm srv1m | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Dec 23, 2025 | Initial Analysis | [email protected] |
| Dec 18, 2025 | New CVE Received | [email protected] |