CVE-2025-47361CWE-129

CVE-2025-47361

High Β· published November 4, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.3
In the wild
Unconfirmed
What it is

⚑ A single out-of-range identifier can trigger a subsystem crash, leading to memory corruptionβ€”like a computer throwing a tantrum over a lost sock! Think of it like a malfunctioning escalator that suddenly stops, causing a pile-up of confused commuters. Just like that escalator, this vulnerability can bring your system to a standstill when it encounters unexpected inputs, leaving everything in a chaotic state. If exploited, this vulnerability could lead to significant instability within the affected system, potentially allowing an attacker to manipulate memory and execute arbitrary code. The consequences could range from unexpected crashes to unauthorized access, making it a high-risk situation for users and administrators alike.

Put simply

Think of it like a malfunctioning escalator that suddenly stops, causing a pile-up of confused commuters. Just like that escalator, this vulnerability can bring your system to a standstill when it encounters unexpected inputs, leaving everything in a chaotic state. This vulnerability occurs when an out-of-range identifier triggers a subsystem crash, resulting in memory corruption that could be exploited by attackers. In effect, it creates an opportunity for them to disrupt system integrity.

What to do

If exploited, this vulnerability could lead to significant instability within the affected system, potentially allowing an attacker to manipulate memory and execute arbitrary code. The consequences could range from unexpected crashes to unauthorized access, making it a high-risk situation for users and administrators alike. To mitigate this issue, ensure you patch to the latest version as soon as it becomes available. Regularly monitor your system and apply configuration best practices to prevent unintended identifier usage. Conduct thorough testing after updates to verify system stability. You've got this! With just a few steps, you can shore up your defenses and keep your systems running smoothly. πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
7.8 Β· HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00087 Β· 0.3th percentile
Weakness
CWE-129 Β· Improper Validation of Array Index
Published
2025-11-04T09:15Z
Affected products (28)
ProductVersionsFixed in
qualcomm/qam8255p_firmwareall versionsβ€”
qualcomm/qam8295p_firmwareall versionsβ€”
qualcomm/qam8620p_firmwareall versionsβ€”
qualcomm/qam8650p_firmwareall versionsβ€”
qualcomm/qam8775p_firmwareall versionsβ€”
qualcomm/qamsrv1h_firmwareall versionsβ€”
qualcomm/qamsrv1m_firmwareall versionsβ€”
qualcomm/qca6574au_firmwareall versionsβ€”
qualcomm/qca6595_firmwareall versionsβ€”
qualcomm/qca6595au_firmwareall versionsβ€”
qualcomm/qca6688aq_firmwareall versionsβ€”
qualcomm/qca6696_firmwareall versionsβ€”
qualcomm/qca6698aq_firmwareall versionsβ€”
qualcomm/qca6797aq_firmwareall versionsβ€”
qualcomm/qca8695au_firmwareall versionsβ€”
qualcomm/sa7255p_firmwareall versionsβ€”
qualcomm/sa7775p_firmwareall versionsβ€”
qualcomm/sa8255p_firmwareall versionsβ€”
qualcomm/sa8295p_firmwareall versionsβ€”
qualcomm/sa8540p_firmwareall versionsβ€”
qualcomm/sa8620p_firmwareall versionsβ€”
qualcomm/sa8650p_firmwareall versionsβ€”
qualcomm/sa8770p_firmwareall versionsβ€”
qualcomm/sa8775p_firmwareall versionsβ€”
qualcomm/sa9000p_firmwareall versionsβ€”
qualcomm/srv1h_firmwareall versionsβ€”
qualcomm/srv1l_firmwareall versionsβ€”
qualcomm/srv1m_firmwareall versionsβ€”
References (1)
EPSS history
Timeline
  • 04 NOV 03:19Z
    Improper Validation of Array Index in Automotive Software platform based on QNX
    cvelistv5