CVE-2025-47353CWE-749

CVE-2025-47353

High Β· published November 4, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.3
In the wild
Unconfirmed
What it is

⚑ A crafty memory corruption flaw lies in wait when processing requests from GVM! This could spell trouble for your system. πŸ”₯ Think of it like a restaurant kitchen where an unexpected ingredient gets tossed into a pot, causing the entire dish to spoil. If the kitchen doesn't catch that rogue ingredient, it could lead to a culinary disaster! If exploited, this vulnerability could allow attackers to manipulate memory, leading to unpredictable behavior such as crashing the service or even executing arbitrary code. It’s like giving a sneaky chef full access to your kitchen – not a recipe for success!

Put simply

Think of it like a restaurant kitchen where an unexpected ingredient gets tossed into a pot, causing the entire dish to spoil. If the kitchen doesn't catch that rogue ingredient, it could lead to a culinary disaster! This vulnerability occurs due to improper handling of memory during the process of incoming requests from GVM, allowing attackers to corrupt memory space and potentially execute malicious code.

What to do

If exploited, this vulnerability could allow attackers to manipulate memory, leading to unpredictable behavior such as crashing the service or even executing arbitrary code. It’s like giving a sneaky chef full access to your kitchen – not a recipe for success! To mitigate this risk, immediately apply patches provided by your vendor and ensure your systems are running the latest versions. Additionally, conduct a thorough review of the affected components to ensure no other vulnerabilities are lurking. πŸ›‘οΈ You've got this! Stay proactive, follow these steps, and your systems will be in safe hands! πŸš€

The record
Technical detail
CVSS v3.1
7.8 Β· HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00087 Β· 0.3th percentile
Weakness
CWE-749 Β· Exposed Dangerous Method or Function
Published
2025-11-04T09:15Z
Affected products (18)
ProductVersionsFixed in
qualcomm/qam8255p_firmwareall versionsβ€”
qualcomm/qam8650p_firmwareall versionsβ€”
qualcomm/qam8775p_firmwareall versionsβ€”
qualcomm/qamsrv1h_firmwareall versionsβ€”
qualcomm/qamsrv1m_firmwareall versionsβ€”
qualcomm/qca6595_firmwareall versionsβ€”
qualcomm/qca6698aq_firmwareall versionsβ€”
qualcomm/qca6797aq_firmwareall versionsβ€”
qualcomm/sa7255p_firmwareall versionsβ€”
qualcomm/sa7775p_firmwareall versionsβ€”
qualcomm/sa8255p_firmwareall versionsβ€”
qualcomm/sa8620p_firmwareall versionsβ€”
qualcomm/sa8650p_firmwareall versionsβ€”
qualcomm/sa8770p_firmwareall versionsβ€”
qualcomm/sa8775p_firmwareall versionsβ€”
qualcomm/sa9000p_firmwareall versionsβ€”
qualcomm/srv1h_firmwareall versionsβ€”
qualcomm/srv1m_firmwareall versionsβ€”
References (1)
EPSS history
Timeline
  • 04 NOV 03:19Z
    Exposed Dangerous Method or Function in Automotive Software platform based on QNX
    cvelistv5