CVE-2025-47378CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

High · published March 2, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
0.1
In the wild
Unconfirmed
What it is

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00073 · 0.1th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2026-03-02T16:53Z
EPSS history
Timeline
  • 02 MAR 16:53Z
    Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
    cvelistv5