CVE-2025-47365CWE-190

CVE-2025-47365

High · published November 4, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.3
In the wild
Unconfirmed
What it is

⚡ A memory corruption issue lurks in the shadows when processing large input data from a remote source! Think of it like a restaurant accepting a gigantic order without checking the kitchen's capacity — if the order is too big, it can cause a complete disaster in the back, leading to chaos on the dining floor! If exploited, this vulnerability could lead to unpredictable behavior, crashes, or even unauthorized data access. An attacker could potentially manipulate the system in ways that compromise its integrity and security, making it a serious threat.

Put simply

Think of it like a restaurant accepting a gigantic order without checking the kitchen's capacity — if the order is too big, it can cause a complete disaster in the back, leading to chaos on the dining floor! This memory corruption vulnerability occurs when the system processes excessively large data inputs from a remote interface, resulting in unstable memory states. This can allow an attacker to execute arbitrary code or crash the application.

What to do

If exploited, this vulnerability could lead to unpredictable behavior, crashes, or even unauthorized data access. An attacker could potentially manipulate the system in ways that compromise its integrity and security, making it a serious threat. To mitigate this vulnerability, it’s crucial to implement input size validation and ensure that your communication interfaces properly handle large datasets. Regularly update your systems to the latest patches to close any existing gaps. You've got this! Stay vigilant and fortify your defenses to keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00087 · 0.3th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-11-04T09:15Z
Affected products (35)
ProductVersionsFixed in
qualcomm/qam8255p_firmwareall versions—
qualcomm/qam8295p_firmwareall versions—
qualcomm/qam8620p_firmwareall versions—
qualcomm/qam8650p_firmwareall versions—
qualcomm/qam8775p_firmwareall versions—
qualcomm/qamsrv1h_firmwareall versions—
qualcomm/qamsrv1m_firmwareall versions—
qualcomm/qca6574au_firmwareall versions—
qualcomm/qca6595_firmwareall versions—
qualcomm/qca6595au_firmwareall versions—
qualcomm/qca6688aq_firmwareall versions—
qualcomm/qca6696_firmwareall versions—
qualcomm/qca6698aq_firmwareall versions—
qualcomm/qca6797aq_firmwareall versions—
qualcomm/qca8695au_firmwareall versions—
qualcomm/sa6145p_firmwareall versions—
qualcomm/sa6150p_firmwareall versions—
qualcomm/sa6155p_firmwareall versions—
qualcomm/sa7255p_firmwareall versions—
qualcomm/sa7775p_firmwareall versions—
qualcomm/sa8145p_firmwareall versions—
qualcomm/sa8150p_firmwareall versions—
qualcomm/sa8155p_firmwareall versions—
qualcomm/sa8195p_firmwareall versions—
qualcomm/sa8255p_firmwareall versions—
qualcomm/sa8295p_firmwareall versions—
qualcomm/sa8540p_firmwareall versions—
qualcomm/sa8620p_firmwareall versions—
qualcomm/sa8650p_firmwareall versions—
qualcomm/sa8770p_firmwareall versions—
qualcomm/sa8775p_firmwareall versions—
qualcomm/sa9000p_firmwareall versions—
qualcomm/srv1h_firmwareall versions—
qualcomm/srv1l_firmwareall versions—
qualcomm/srv1m_firmwareall versions—
References (1)
EPSS history
Timeline
  • 04 NOV 03:19Z
    Integer Overflow or Wraparound in Automotive Platform
    cvelistv5