CVE-2025-47366CWE-749

Exposed Dangerous Method or Function in HLOS

High · published February 2, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

⚡ A sneaky cryptographic issue lurks in Trusted Zones, all because of outdated code reacting to incorrect input from a HLOS! Think of it like a restaurant that continues to serve a popular dish without updating the recipe — when the ingredients change, you might end up with a *totally* different meal that could spoil the experience for everyone. If exploited, this vulnerability could allow attackers to tamper with sensitive data or take control of secure processes, creating an environment where trust is shattered. A compromised system is a playground for malicious actors, putting everything from user privacy to critical operations at risk!

Put simply

Think of it like a restaurant that continues to serve a popular dish without updating the recipe — when the ingredients change, you might end up with a *totally* different meal that could spoil the experience for everyone. This vulnerability arises from an outdated cryptographic implementation in a Trusted Zone that fails to validate and handle incorrect inputs from a High-Level Operating System (HLOS), potentially leading to unauthorized actions or data exposure.

What to do

If exploited, this vulnerability could allow attackers to tamper with sensitive data or take control of secure processes, creating an environment where trust is shattered. A compromised system is a playground for malicious actors, putting everything from user privacy to critical operations at risk! Update the cryptographic libraries and related code to the latest versions as soon as possible. Ensure all inputs from HLOS are properly validated and that your systems are continuously monitored for outdated components. Don't let older code become your Achilles' heel! You've got this! By following these steps, you'll ensure your environment is fortified against this threat. 🛡️

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00104 · 1.0th percentile
Weakness
CWE-749 · Exposed Dangerous Method or Function
Published
2026-02-02T15:20Z
EPSS history
Timeline
  • 02 FEB 15:20Z
    Exposed Dangerous Method or Function in HLOS
    cvelistv5