ZeroHour

CVE-2025-47389

CVSS 3.1
7.8 high
EPSS
<1%p1
Published
()
Modified
Description

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Vendors
qualcomm
Products
ar8035 firmware, cologne firmware, csra6620 firmware, csra6640 firmware, fastconnect 6200 firmware, snapdragon x35 5g modem-rf system firmware, snapdragon x53 5g modem-rf system firmware, snapdragon x55 5g modem-rf system firmware, snapdragon x72 5g modem-rf system firmware, snapdragon x75 5g modem-rf system firmware, snapdragon xr2\+ gen 1 platform firmware, snapdragon xr2 5g platform firmware
Weakness
CWE-120
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.