CVE-2025-47362CWE-126

CVE-2025-47362

Medium · published November 4, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

Information disclosure while processing message from client with invalid payload.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00084 · 0.2th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2025-11-04T09:15Z
Affected products (38)
ProductVersionsFixed in
qualcomm/msm8996au_firmwareall versions—
qualcomm/qam8255p_firmwareall versions—
qualcomm/qam8295p_firmwareall versions—
qualcomm/qam8620p_firmwareall versions—
qualcomm/qam8650p_firmwareall versions—
qualcomm/qam8775p_firmwareall versions—
qualcomm/qamsrv1h_firmwareall versions—
qualcomm/qamsrv1m_firmwareall versions—
qualcomm/qca6574au_firmwareall versions—
qualcomm/qca6584au_firmwareall versions—
qualcomm/qca6595_firmwareall versions—
qualcomm/qca6595au_firmwareall versions—
qualcomm/qca6688aq_firmwareall versions—
qualcomm/qca6696_firmwareall versions—
qualcomm/qca6698aq_firmwareall versions—
qualcomm/qca6797aq_firmwareall versions—
qualcomm/qca8695au_firmwareall versions—
qualcomm/sa6145p_firmwareall versions—
qualcomm/sa6150p_firmwareall versions—
qualcomm/sa6155p_firmwareall versions—
qualcomm/sa7255p_firmwareall versions—
qualcomm/sa7775p_firmwareall versions—
qualcomm/sa8145p_firmwareall versions—
qualcomm/sa8150p_firmwareall versions—
qualcomm/sa8155p_firmwareall versions—
qualcomm/sa8195p_firmwareall versions—
qualcomm/sa8255p_firmwareall versions—
qualcomm/sa8295p_firmwareall versions—
qualcomm/sa8540p_firmwareall versions—
qualcomm/sa8620p_firmwareall versions—
qualcomm/sa8650p_firmwareall versions—
qualcomm/sa8770p_firmwareall versions—
qualcomm/sa8775p_firmwareall versions—
qualcomm/sa9000p_firmwareall versions—
qualcomm/snapdragon_820_automotive_platform_firmwareall versions—
qualcomm/srv1h_firmwareall versions—
qualcomm/srv1l_firmwareall versions—
qualcomm/srv1m_firmwareall versions—
References (1)
https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html · [email protected]
EPSS history
Timeline
  • 04 NOV 03:19Z
    Buffer Over-read in Automotive Software platform based on QNX
    cvelistv5