CVE-2025-47323CWE-190

CVE-2025-47323

High Β· published December 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.5
In the wild
Unconfirmed
What it is

⚑ Memory corruption is lurking in GPR packet routing! This vulnerability allows a crafty attacker to exploit large data packets like a master chef sneaking in a mystery ingredient to a recipe, creating a potentially disastrous dish. 🍽️ Think of data packets like oversized boxes on a delivery truck. If the driver mishandles a box that’s too big, it could spill its contents everywhere, causing chaos and delays. In our case, the handling of large GPR packets can corrupt memory, leading to system instability. An attacker could manipulate these large packets to cause memory corruption, potentially allowing them to alter system behavior or crash services altogether. This could lead to sensitive data exposure or even a complete denial of service, which is absolutely devastating for any organization relying on stable operations.

Put simply

Think of data packets like oversized boxes on a delivery truck. If the driver mishandles a box that’s too big, it could spill its contents everywhere, causing chaos and delays. In our case, the handling of large GPR packets can corrupt memory, leading to system instability. CVE-2025-47323 involves a memory corruption issue when routing large GPR packets between user and root, leading to potential exploitation of system memory and erratic behavior of applications involved in handling these packets.

What to do

An attacker could manipulate these large packets to cause memory corruption, potentially allowing them to alter system behavior or crash services altogether. This could lead to sensitive data exposure or even a complete denial of service, which is absolutely devastating for any organization relying on stable operations. To remediate this vulnerability, ensure your systems are updated with the latest patches from your vendor. Limit the size of GPR packets if possible and conduct thorough testing to prevent unexpected behavior in your applications. Regularly audit your system configurations as part of your security hygiene. You've got this! With a little diligence, you can fortify your defenses and keep your systems running smoothly! πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
7.8 Β· HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00092 Β· 0.5th percentile
Weakness
CWE-190 Β· Integer Overflow or Wraparound
Published
2025-12-18T11:15Z
Affected products (178)
ProductVersionsFixed in
qualcomm/fastconnect_6900_firmwareall versionsβ€”
qualcomm/fastconnect_7800_firmwareall versionsβ€”
qualcomm/qam8255p_firmwareall versionsβ€”
qualcomm/qam8295p_firmwareall versionsβ€”
qualcomm/qam8620p_firmwareall versionsβ€”
qualcomm/qam8650p_firmwareall versionsβ€”
qualcomm/qam8775p_firmwareall versionsβ€”
qualcomm/qamsrv1h_firmwareall versionsβ€”
qualcomm/qamsrv1m_firmwareall versionsβ€”
qualcomm/qca6174a_firmwareall versionsβ€”
qualcomm/qca6391_firmwareall versionsβ€”
qualcomm/qca6564_firmwareall versionsβ€”
qualcomm/qca6564au_firmwareall versionsβ€”
qualcomm/qca6574_firmwareall versionsβ€”
qualcomm/qca6574a_firmwareall versionsβ€”
qualcomm/qca6574au_firmwareall versionsβ€”
qualcomm/qca6584au_firmwareall versionsβ€”
qualcomm/qca6595_firmwareall versionsβ€”
qualcomm/qca6595au_firmwareall versionsβ€”
qualcomm/qca6678aq_firmwareall versionsβ€”
qualcomm/qca6688aq_firmwareall versionsβ€”
qualcomm/qca6696_firmwareall versionsβ€”
qualcomm/qca6698aq_firmwareall versionsβ€”
qualcomm/qca6797aq_firmwareall versionsβ€”
qualcomm/qca8081_firmwareall versionsβ€”
qualcomm/qca8337_firmwareall versionsβ€”
qualcomm/qcc710_firmwareall versionsβ€”
qualcomm/qcm2290_firmwareall versionsβ€”
qualcomm/qcm4490_firmwareall versionsβ€”
qualcomm/qcm5430_firmwareall versionsβ€”
qualcomm/qcm6490_firmwareall versionsβ€”
qualcomm/qcm8550_firmwareall versionsβ€”
qualcomm/qcn6024_firmwareall versionsβ€”
qualcomm/qcn6224_firmwareall versionsβ€”
qualcomm/qcn6274_firmwareall versionsβ€”
qualcomm/qcn9011_firmwareall versionsβ€”
qualcomm/qcn9012_firmwareall versionsβ€”
qualcomm/qcn9024_firmwareall versionsβ€”
qualcomm/qcs2290_firmwareall versionsβ€”
qualcomm/qcs4490_firmwareall versionsβ€”
qualcomm/wcn7860_firmwareall versionsβ€”
qualcomm/wcn7861_firmwareall versionsβ€”
qualcomm/wcn7880_firmwareall versionsβ€”
qualcomm/wcn7881_firmwareall versionsβ€”
qualcomm/wsa8810_firmwareall versionsβ€”
qualcomm/wsa8815_firmwareall versionsβ€”
qualcomm/wsa8830_firmwareall versionsβ€”
qualcomm/wsa8832_firmwareall versionsβ€”
qualcomm/wsa8835_firmwareall versionsβ€”
qualcomm/wsa8840_firmwareall versionsβ€”
qualcomm/wsa8845_firmwareall versionsβ€”
qualcomm/wsa8845h_firmwareall versionsβ€”
qualcomm/ar8035_firmwareall versionsβ€”
qualcomm/csra6620_firmwareall versionsβ€”
qualcomm/csra6640_firmwareall versionsβ€”
qualcomm/fastconnect_6200_firmwareall versionsβ€”
qualcomm/fastconnect_6700_firmwareall versionsβ€”
qualcomm/qcs5430_firmwareall versionsβ€”
qualcomm/qcs6490_firmwareall versionsβ€”
qualcomm/qcs8550_firmwareall versionsβ€”
qualcomm/qep8111_firmwareall versionsβ€”
qualcomm/qfw7114_firmwareall versionsβ€”
qualcomm/qfw7124_firmwareall versionsβ€”
qualcomm/qmp1000_firmwareall versionsβ€”
qualcomm/video_collaboration_vc3_platform_firmwareall versionsβ€”
qualcomm/robotics_rb2_platform_firmwareall versionsβ€”
qualcomm/sa4150p_firmwareall versionsβ€”
qualcomm/sa4155p_firmwareall versionsβ€”
qualcomm/sa6145p_firmwareall versionsβ€”
qualcomm/sa6150p_firmwareall versionsβ€”
qualcomm/sa6155_firmwareall versionsβ€”
qualcomm/sa6155p_firmwareall versionsβ€”
qualcomm/sa7255p_firmwareall versionsβ€”
qualcomm/sa7775p_firmwareall versionsβ€”
qualcomm/sa8145p_firmwareall versionsβ€”
qualcomm/sa8150p_firmwareall versionsβ€”
qualcomm/sa8155_firmwareall versionsβ€”
qualcomm/sa8155p_firmwareall versionsβ€”
qualcomm/sa8195p_firmwareall versionsβ€”
qualcomm/sa8255p_firmwareall versionsβ€”
qualcomm/sa8295p_firmwareall versionsβ€”
qualcomm/sa8540p_firmwareall versionsβ€”
qualcomm/sa8620p_firmwareall versionsβ€”
qualcomm/sa8650p_firmwareall versionsβ€”
qualcomm/sa8770p_firmwareall versionsβ€”
qualcomm/sa8775p_firmwareall versionsβ€”
qualcomm/sa9000p_firmwareall versionsβ€”
qualcomm/sc8380xp_firmwareall versionsβ€”
qualcomm/sdx61_firmwareall versionsβ€”
qualcomm/sdx71m_firmwareall versionsβ€”
qualcomm/sg4150p_firmwareall versionsβ€”
qualcomm/sg8275_firmwareall versionsβ€”
qualcomm/sg8275p_firmwareall versionsβ€”
qualcomm/sm4635_firmwareall versionsβ€”
qualcomm/sm6475_firmwareall versionsβ€”
qualcomm/sm6650_firmwareall versionsβ€”
qualcomm/sm6650p_firmwareall versionsβ€”
qualcomm/sm7325p_firmwareall versionsβ€”
qualcomm/sm7435_firmwareall versionsβ€”
qualcomm/sm7550_firmwareall versionsβ€”
qualcomm/sm7550p_firmwareall versionsβ€”
qualcomm/sm7635_firmwareall versionsβ€”
qualcomm/sm7635p_firmwareall versionsβ€”
qualcomm/sm7675_firmwareall versionsβ€”
qualcomm/sm7675p_firmwareall versionsβ€”
qualcomm/sm8475p_firmwareall versionsβ€”
qualcomm/sm8550p_firmwareall versionsβ€”
qualcomm/sm8635_firmwareall versionsβ€”
qualcomm/sm8635p_firmwareall versionsβ€”
qualcomm/sm8650q_firmwareall versionsβ€”
qualcomm/sm8735_firmwareall versionsβ€”
qualcomm/sm8750_firmwareall versionsβ€”
qualcomm/sm8750p_firmwareall versionsβ€”
qualcomm/snapdragon_4_gen_1_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_4_gen_2_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_460_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_480_5g_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmwareall versionsβ€”
qualcomm/snapdragon_6_gen_1_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_662_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_680_4g_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmwareall versionsβ€”
qualcomm/snapdragon_695_5g_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_7_gen_1_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_7\+_gen_2_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_778g_5g_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\)_firmwareall versionsβ€”
qualcomm/snapdragon_782g_mobile_platform_\(sm7325-af\)_firmwareall versionsβ€”
qualcomm/snapdragon_7c\+_gen_3_compute_firmwareall versionsβ€”
qualcomm/snapdragon_8_gen_1_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_8_gen_2_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_8_gen_3_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_8\+_gen_1_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_8\+_gen_2_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_888_5g_mobile_platform_firmwareall versionsβ€”
qualcomm/snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)_firmwareall versionsβ€”
qualcomm/snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmwareall versionsβ€”
qualcomm/snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmwareall versionsβ€”
qualcomm/snapdragon_ar1_gen_1_platform_firmwareall versionsβ€”
qualcomm/snapdragon_ar1_gen_1_platform_\"luna1\"_firmwareall versionsβ€”
qualcomm/snapdragon_ar2_gen_1_platform_firmwareall versionsβ€”
qualcomm/snapdragon_auto_5g_modem-rf_gen_2_firmwareall versionsβ€”
qualcomm/snapdragon_w5\+_gen_1_wearable_platform_firmwareall versionsβ€”
qualcomm/snapdragon_x32_5g_modem-rf_system_firmwareall versionsβ€”
qualcomm/snapdragon_x35_5g_modem-rf_system_firmwareall versionsβ€”
qualcomm/snapdragon_x65_5g_modem-rf_system_firmwareall versionsβ€”
qualcomm/snapdragon_x70_modem-rf_system_firmwareall versionsβ€”
qualcomm/snapdragon_x72_5g_modem-rf_system_firmwareall versionsβ€”
qualcomm/snapdragon_x75_5g_modem-rf_system_firmwareall versionsβ€”
qualcomm/srv1h_firmwareall versionsβ€”
qualcomm/srv1l_firmwareall versionsβ€”
qualcomm/srv1m_firmwareall versionsβ€”
qualcomm/ssg2115p_firmwareall versionsβ€”
qualcomm/ssg2125p_firmwareall versionsβ€”
qualcomm/sw5100_firmwareall versionsβ€”
qualcomm/sw5100p_firmwareall versionsβ€”
qualcomm/sxr1230p_firmwareall versionsβ€”
qualcomm/sxr2230p_firmwareall versionsβ€”
qualcomm/sxr2250p_firmwareall versionsβ€”
qualcomm/wcd9335_firmwareall versionsβ€”
qualcomm/wcd9340_firmwareall versionsβ€”
qualcomm/wcd9370_firmwareall versionsβ€”
qualcomm/wcd9371_firmwareall versionsβ€”
qualcomm/wcd9375_firmwareall versionsβ€”
qualcomm/wcd9378_firmwareall versionsβ€”
qualcomm/wcd9380_firmwareall versionsβ€”
qualcomm/wcd9385_firmwareall versionsβ€”
qualcomm/wcd9390_firmwareall versionsβ€”
qualcomm/wcd9395_firmwareall versionsβ€”
qualcomm/wcn3910_firmwareall versionsβ€”
qualcomm/wcn3950_firmwareall versionsβ€”
qualcomm/wcn3980_firmwareall versionsβ€”
qualcomm/wcn3988_firmwareall versionsβ€”
qualcomm/wcn6650_firmwareall versionsβ€”
qualcomm/wcn6740_firmwareall versionsβ€”
qualcomm/wcn6755_firmwareall versionsβ€”
qualcomm/wcn7750_firmwareall versionsβ€”
qualcomm/snapdragon_8_gen_1_firmwareall versionsβ€”
References (1)
EPSS history
Timeline
  • 18 DEC 05:29Z
    Integer Overflow or Wraparound in Audio
    cvelistv5