CVE-2025-47360CWE-121

CVE-2025-47360

High Β· published November 4, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.3
In the wild
Unconfirmed
What it is

⚑ Attention, device managers! There’s a memory corruption vulnerability (CVE-2025-47360) that could make your device management a chaotic circus! πŸŽͺ Think of it like a malfunctioning assembly line where a broken machine accidentally misplaces crucial parts, leading to malfunctioning products. In this case, while processing client messages, a mismanaged memory can cause unexpected behavior and instability in your system. An attacker could exploit this vulnerability to cause crashes or erratic behavior in the device management system. This could lead to disruptions in service, potential data leakage, or unauthorized access to sensitive information, creating an absolute nightmare for security and operational integrity.

Put simply

Think of it like a malfunctioning assembly line where a broken machine accidentally misplaces crucial parts, leading to malfunctioning products. In this case, while processing client messages, a mismanaged memory can cause unexpected behavior and instability in your system. The memory corruption issue occurs when the server fails to handle client messages correctly, which might allow attackers to manipulate the memory state, leading to crashes or arbitrary code execution.

What to do

An attacker could exploit this vulnerability to cause crashes or erratic behavior in the device management system. This could lead to disruptions in service, potential data leakage, or unauthorized access to sensitive information, creating an absolute nightmare for security and operational integrity. To remediate this issue, ensure that you apply the latest patches as soon as they are available. Regularly review and audit your device management system for any irregularities and consider implementing additional monitoring to catch anomalies early. You've got this! With timely action, you can safeguard your system and keep those devices running smoothly. πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
7.8 Β· HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00087 Β· 0.3th percentile
Weakness
CWE-121 Β· Stack-based Buffer Overflow
Published
2025-11-04T09:15Z
Affected products (35)
ProductVersionsFixed in
qualcomm/qam8255p_firmwareall versionsβ€”
qualcomm/qam8295p_firmwareall versionsβ€”
qualcomm/qam8620p_firmwareall versionsβ€”
qualcomm/qam8650p_firmwareall versionsβ€”
qualcomm/qam8775p_firmwareall versionsβ€”
qualcomm/qamsrv1h_firmwareall versionsβ€”
qualcomm/qamsrv1m_firmwareall versionsβ€”
qualcomm/qca6574au_firmwareall versionsβ€”
qualcomm/qca6595_firmwareall versionsβ€”
qualcomm/qca6595au_firmwareall versionsβ€”
qualcomm/qca6688aq_firmwareall versionsβ€”
qualcomm/qca6696_firmwareall versionsβ€”
qualcomm/qca6698aq_firmwareall versionsβ€”
qualcomm/qca6797aq_firmwareall versionsβ€”
qualcomm/qca8695au_firmwareall versionsβ€”
qualcomm/sa6145p_firmwareall versionsβ€”
qualcomm/sa6150p_firmwareall versionsβ€”
qualcomm/sa6155p_firmwareall versionsβ€”
qualcomm/sa7255p_firmwareall versionsβ€”
qualcomm/sa7775p_firmwareall versionsβ€”
qualcomm/sa8145p_firmwareall versionsβ€”
qualcomm/sa8150p_firmwareall versionsβ€”
qualcomm/sa8155p_firmwareall versionsβ€”
qualcomm/sa8195p_firmwareall versionsβ€”
qualcomm/sa8255p_firmwareall versionsβ€”
qualcomm/sa8295p_firmwareall versionsβ€”
qualcomm/sa8540p_firmwareall versionsβ€”
qualcomm/sa8620p_firmwareall versionsβ€”
qualcomm/sa8650p_firmwareall versionsβ€”
qualcomm/sa8770p_firmwareall versionsβ€”
qualcomm/sa8775p_firmwareall versionsβ€”
qualcomm/sa9000p_firmwareall versionsβ€”
qualcomm/srv1h_firmwareall versionsβ€”
qualcomm/srv1l_firmwareall versionsβ€”
qualcomm/srv1m_firmwareall versionsβ€”
References (1)
EPSS history
Timeline
  • 04 NOV 03:19Z
    Stack-based Buffer Overflow in Automotive Software platform based on QNX
    cvelistv5