HIGH · 8.8

CVE-2025-47392

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

Vulnerability Description

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Qualcomm5G Fixed Wireless Access Platform Firmware-
Qualcomm5G Fixed Wireless Access Platform-
QualcommAr8035 Firmware-
QualcommAr8035-
QualcommCsra6620 Firmware-
QualcommCsra6620-
QualcommCsra6640 Firmware-
QualcommCsra6640-
QualcommFastconnect 6200 Firmware-
QualcommFastconnect 6200-
QualcommSnapdragon 690 5G Mobile Platform Firmware-
QualcommSnapdragon 690 5G Mobile Platform-
QualcommSnapdragon 695 5G Mobile Platform Firmware-
QualcommSnapdragon 695 5G Mobile Platform-
QualcommSnapdragon 7 Gen 1 Mobile Platform Firmware-
QualcommSnapdragon 7 Gen 1 Mobile Platform-
QualcommSnapdragon 7\+ Gen 2 Mobile Platform Firmware-
QualcommSnapdragon 7\+ Gen 2 Mobile Platform-
QualcommSnapdragon 778G 5G Mobile Platform Firmware-
QualcommSnapdragon 778G 5G Mobile Platform-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2025-47392?

CVE-2025-47392 is a vulnerability with a CVSS score of 8.8 (HIGH). Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

How severe is CVE-2025-47392?

CVE-2025-47392 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-47392?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm 5G Fixed Wireless Access Platform Firmware, Qualcomm 5G Fixed Wireless Access Platform, Qualcomm Ar8035 Firmware, Qualcomm Ar8035, Qualcomm Csra6620 Firmware.