CVE-2025-47342
Unknown Unknown - Not Provided

BaseFortify

Vulnerability report for CVE-2025-47342, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2025-10-09

Last updated on: 2025-10-21

Assigner: Qualcomm, Inc.

Description

Transient DOS may occur when multi-profile concurrency arises with QHS enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-10-09
Last Modified
2025-10-21
Generated
2026-07-06
AI Q&A
2025-10-09
EPSS Evaluated
2026-07-05
NVD
EUVD

Affected Vendors & Products

Showing 16 associated CPEs
Vendor Product Version / Range
qualcomm qcc5161_firmware *
qualcomm qcc5161 *
qualcomm qcc7225_firmware *
qualcomm qcc7225 *
qualcomm qcc7226_firmware *
qualcomm qcc7226 *
qualcomm qcc7228_firmware *
qualcomm qcc7228 *
qualcomm s3_gen_2_sound_platform_firmware *
qualcomm s3_gen_2_sound_platform *
qualcomm s3_sound_platform_firmware *
qualcomm s3_sound_platform *
qualcomm s5_gen_2_sound_platform_firmware *
qualcomm s5_gen_2_sound_platform *
qualcomm s5_sound_platform_firmware *
qualcomm s5_sound_platform *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-416 The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a transient denial of service (DOS) issue that occurs when multiple profiles are used concurrently with QHS (Qualcomm High Speed) enabled. It causes temporary service disruption under these specific conditions.

Impact Analysis

The vulnerability can lead to a temporary denial of service, causing interruptions or unavailability of affected systems or services when multi-profile concurrency with QHS is active. This may impact system reliability and availability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-47342. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart