CVE-2025-47352CWE-129

CVE-2025-47352

High ยท published November 4, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.3
In the wild
Unconfirmed
What it is

โšก A sneaky memory corruption issue lurks in audio streaming operations! Just when you thought your playlist was safe, this vulnerability could lead to some serious chaos. ๐ŸŽถ Think of it like a DJ mixing tracks on the fly but accidentally blending the wrong beats โ€“ it can create a total audio mess! This flaw lets attackers manipulate memory, leading to potentially catastrophic results if they get their hands on it. An attacker could crash the audio processing service or even execute arbitrary code, which is absolutely devastating for any application relying on smooth audio streaming. Imagine your favorite music app throwing random errors or going completely offline mid-jam session!

Put simply

Think of it like a DJ mixing tracks on the fly but accidentally blending the wrong beats โ€“ it can create a total audio mess! This flaw lets attackers manipulate memory, leading to potentially catastrophic results if they get their hands on it. This vulnerability arises from improper handling of memory during audio data processing, which can be exploited to gain control over the application or cause unexpected crashes. While it's not currently known to be exploited, it certainly poses a high risk if left unaddressed.

What to do

An attacker could crash the audio processing service or even execute arbitrary code, which is absolutely devastating for any application relying on smooth audio streaming. Imagine your favorite music app throwing random errors or going completely offline mid-jam session! Update your audio processing libraries to the latest versions that patch this vulnerability. Review your application for proper memory management practices, and consider implementing robust error handling to mitigate potential impacts. Act now to safeguard your application! You've got this! By taking these steps, you'll ensure a smoother, safer audio experience for your users. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
7.8 ยท HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00087 ยท 0.3th percentile
Weakness
CWE-129 ยท Improper Validation of Array Index
Published
2025-11-04T09:15Z
Affected products (14)
ProductVersionsFixed in
qualcomm/fastconnect_7800_firmwareall versionsโ€”
qualcomm/qcc2072_firmwareall versionsโ€”
qualcomm/wcd9378c_firmwareall versionsโ€”
qualcomm/wsa8840_firmwareall versionsโ€”
qualcomm/wsa8845_firmwareall versionsโ€”
qualcomm/wsa8845h_firmwareall versionsโ€”
qualcomm/x2000077_firmwareall versionsโ€”
qualcomm/x2000086_firmwareall versionsโ€”
qualcomm/x2000090_firmwareall versionsโ€”
qualcomm/x2000092_firmwareall versionsโ€”
qualcomm/x2000094_firmwareall versionsโ€”
qualcomm/xg101002_firmwareall versionsโ€”
qualcomm/xg101032_firmwareall versionsโ€”
qualcomm/xg101039_firmwareall versionsโ€”
References (1)
EPSS history
Timeline
  • 04 NOV 03:19Z
    Improper Validation of Array Index in Audio
    cvelistv5