CVE-2025-47323
Analyzed
Analyzed - Analysis Complete
BaseFortify
Publication date: 2025-12-18
Last updated on: 2026-01-28
Assigner: Qualcomm, Inc.
Description
Description
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| qualcomm | fastconnect_6900_firmware | * |
| qualcomm | fastconnect_6900 | * |
| qualcomm | fastconnect_7800_firmware | * |
| qualcomm | fastconnect_7800 | * |
| qualcomm | qam8255p_firmware | * |
| qualcomm | qam8255p | * |
| qualcomm | qam8295p_firmware | * |
| qualcomm | qam8295p | * |
| qualcomm | qam8620p_firmware | * |
| qualcomm | qam8620p | * |
| qualcomm | qam8650p_firmware | * |
| qualcomm | qam8650p | * |
| qualcomm | qam8775p_firmware | * |
| qualcomm | qam8775p | * |
| qualcomm | qamsrv1h_firmware | * |
| qualcomm | qamsrv1h | * |
| qualcomm | qamsrv1m_firmware | * |
| qualcomm | qamsrv1m | * |
| qualcomm | qca6174a_firmware | * |
| qualcomm | qca6174a | * |
| qualcomm | qca6391_firmware | * |
| qualcomm | qca6391 | * |
| qualcomm | qca6564_firmware | * |
| qualcomm | qca6564 | * |
| qualcomm | qca6564au_firmware | * |
| qualcomm | qca6564au | * |
| qualcomm | qca6574_firmware | * |
| qualcomm | qca6574 | * |
| qualcomm | qca6574a_firmware | * |
| qualcomm | qca6574a | * |
| qualcomm | qca6574au_firmware | * |
| qualcomm | qca6574au | * |
| qualcomm | qca6584au_firmware | * |
| qualcomm | qca6584au | * |
| qualcomm | qca6595_firmware | * |
| qualcomm | qca6595 | * |
| qualcomm | qca6595au_firmware | * |
| qualcomm | qca6595au | * |
| qualcomm | qca6678aq_firmware | * |
| qualcomm | qca6678aq | * |
| qualcomm | qca6688aq_firmware | * |
| qualcomm | qca6688aq | * |
| qualcomm | qca6696_firmware | * |
| qualcomm | qca6696 | * |
| qualcomm | qca6698aq_firmware | * |
| qualcomm | qca6698aq | * |
| qualcomm | qca6797aq_firmware | * |
| qualcomm | qca6797aq | * |
| qualcomm | qca8081_firmware | * |
| qualcomm | qca8081 | * |
| qualcomm | qca8337_firmware | * |
| qualcomm | qca8337 | * |
| qualcomm | qcc710_firmware | * |
| qualcomm | qcc710 | * |
| qualcomm | qcm2290_firmware | * |
| qualcomm | qcm2290 | * |
| qualcomm | qcm4490_firmware | * |
| qualcomm | qcm4490 | * |
| qualcomm | qcm5430_firmware | * |
| qualcomm | qcm5430 | * |
| qualcomm | qcm6490_firmware | * |
| qualcomm | qcm6490 | * |
| qualcomm | qcm8550_firmware | * |
| qualcomm | qcm8550 | * |
| qualcomm | qcn6024_firmware | * |
| qualcomm | qcn6024 | * |
| qualcomm | qcn6224_firmware | * |
| qualcomm | qcn6224 | * |
| qualcomm | qcn6274_firmware | * |
| qualcomm | qcn6274 | * |
| qualcomm | qcn9011_firmware | * |
| qualcomm | qcn9011 | * |
| qualcomm | qcn9012_firmware | * |
| qualcomm | qcn9012 | * |
| qualcomm | qcn9024_firmware | * |
| qualcomm | qcn9024 | * |
| qualcomm | qcs2290_firmware | * |
| qualcomm | qcs2290 | * |
| qualcomm | qcs4490_firmware | * |
| qualcomm | qcs4490 | * |
| qualcomm | wcn7860_firmware | * |
| qualcomm | wcn7860 | * |
| qualcomm | wcn7861_firmware | * |
| qualcomm | wcn7861 | * |
| qualcomm | wcn7880_firmware | * |
| qualcomm | wcn7880 | * |
| qualcomm | wcn7881_firmware | * |
| qualcomm | wcn7881 | * |
| qualcomm | wsa8810_firmware | * |
| qualcomm | wsa8810 | * |
| qualcomm | wsa8815_firmware | * |
| qualcomm | wsa8815 | * |
| qualcomm | wsa8830_firmware | * |
| qualcomm | wsa8830 | * |
| qualcomm | wsa8832_firmware | * |
| qualcomm | wsa8832 | * |
| qualcomm | wsa8835_firmware | * |
| qualcomm | wsa8835 | * |
| qualcomm | wsa8840_firmware | * |
| qualcomm | wsa8840 | * |
| qualcomm | wsa8845_firmware | * |
| qualcomm | wsa8845 | * |
| qualcomm | wsa8845h_firmware | * |
| qualcomm | wsa8845h | * |
| qualcomm | ar8035_firmware | * |
| qualcomm | ar8035 | * |
| qualcomm | csra6620_firmware | * |
| qualcomm | csra6620 | * |
| qualcomm | csra6640_firmware | * |
| qualcomm | csra6640 | * |
| qualcomm | fastconnect_6200_firmware | * |
| qualcomm | fastconnect_6200 | * |
| qualcomm | fastconnect_6700_firmware | * |
| qualcomm | fastconnect_6700 | * |
| qualcomm | qcs5430_firmware | * |
| qualcomm | qcs5430 | * |
| qualcomm | qcs6490_firmware | * |
| qualcomm | qcs6490 | * |
| qualcomm | qcs8550_firmware | * |
| qualcomm | qcs8550 | * |
| qualcomm | qep8111_firmware | * |
| qualcomm | qep8111 | * |
| qualcomm | qfw7114_firmware | * |
| qualcomm | qfw7114 | * |
| qualcomm | qfw7124_firmware | * |
| qualcomm | qfw7124 | * |
| qualcomm | qmp1000_firmware | * |
| qualcomm | qmp1000 | * |
| qualcomm | video_collaboration_vc3_platform_firmware | * |
| qualcomm | video_collaboration_vc3_platform | * |
| qualcomm | robotics_rb2_platform_firmware | * |
| qualcomm | robotics_rb2_platform | * |
| qualcomm | sa4150p_firmware | * |
| qualcomm | sa4150p | * |
| qualcomm | sa4155p_firmware | * |
| qualcomm | sa4155p | * |
| qualcomm | sa6145p_firmware | * |
| qualcomm | sa6145p | * |
| qualcomm | sa6150p_firmware | * |
| qualcomm | sa6150p | * |
| qualcomm | sa6155_firmware | * |
| qualcomm | sa6155 | * |
| qualcomm | sa6155p_firmware | * |
| qualcomm | sa6155p | * |
| qualcomm | sa7255p_firmware | * |
| qualcomm | sa7255p | * |
| qualcomm | sa7775p_firmware | * |
| qualcomm | sa7775p | * |
| qualcomm | sa8145p_firmware | * |
| qualcomm | sa8145p | * |
| qualcomm | sa8150p_firmware | * |
| qualcomm | sa8150p | * |
| qualcomm | sa8155_firmware | * |
| qualcomm | sa8155 | * |
| qualcomm | sa8155p_firmware | * |
| qualcomm | sa8155p | * |
| qualcomm | sa8195p_firmware | * |
| qualcomm | sa8195p | * |
| qualcomm | sa8255p_firmware | * |
| qualcomm | sa8255p | * |
| qualcomm | sa8295p_firmware | * |
| qualcomm | sa8295p | * |
| qualcomm | sa8540p_firmware | * |
| qualcomm | sa8540p | * |
| qualcomm | sa8620p_firmware | * |
| qualcomm | sa8620p | * |
| qualcomm | sa8650p_firmware | * |
| qualcomm | sa8650p | * |
| qualcomm | sa8770p_firmware | * |
| qualcomm | sa8770p | * |
| qualcomm | sa8775p_firmware | * |
| qualcomm | sa8775p | * |
| qualcomm | sa9000p_firmware | * |
| qualcomm | sa9000p | * |
| qualcomm | sc8380xp_firmware | * |
| qualcomm | sc8380xp | * |
| qualcomm | sdx61_firmware | * |
| qualcomm | sdx61 | * |
| qualcomm | sdx71m_firmware | * |
| qualcomm | sdx71m | * |
| qualcomm | sg4150p_firmware | * |
| qualcomm | sg4150p | * |
| qualcomm | sg8275_firmware | * |
| qualcomm | sg8275 | * |
| qualcomm | sg8275p_firmware | * |
| qualcomm | sg8275p | * |
| qualcomm | sm4635_firmware | * |
| qualcomm | sm4635 | * |
| qualcomm | sm6475_firmware | * |
| qualcomm | sm6475 | * |
| qualcomm | sm6650_firmware | * |
| qualcomm | sm6650 | * |
| qualcomm | sm6650p_firmware | * |
| qualcomm | sm6650p | * |
| qualcomm | sm7325p_firmware | * |
| qualcomm | sm7325p | * |
| qualcomm | sm7435_firmware | * |
| qualcomm | sm7435 | * |
| qualcomm | sm7550_firmware | * |
| qualcomm | sm7550 | * |
| qualcomm | sm7550p_firmware | * |
| qualcomm | sm7550p | * |
| qualcomm | sm7635_firmware | * |
| qualcomm | sm7635 | * |
| qualcomm | sm7635p_firmware | * |
| qualcomm | sm7635p | * |
| qualcomm | sm7675_firmware | * |
| qualcomm | sm7675 | * |
| qualcomm | sm7675p_firmware | * |
| qualcomm | sm7675p | * |
| qualcomm | sm8475p_firmware | * |
| qualcomm | sm8475p | * |
| qualcomm | sm8550p_firmware | * |
| qualcomm | sm8550p | * |
| qualcomm | sm8635_firmware | * |
| qualcomm | sm8635 | * |
| qualcomm | sm8635p_firmware | * |
| qualcomm | sm8635p | * |
| qualcomm | sm8650q_firmware | * |
| qualcomm | sm8650q | * |
| qualcomm | sm8735_firmware | * |
| qualcomm | sm8735 | * |
| qualcomm | sm8750_firmware | * |
| qualcomm | sm8750 | * |
| qualcomm | sm8750p_firmware | * |
| qualcomm | sm8750p | * |
| qualcomm | snapdragon_4_gen_1_mobile_platform_firmware | * |
| qualcomm | snapdragon_4_gen_1_mobile_platform | * |
| qualcomm | snapdragon_4_gen_2_mobile_platform_firmware | * |
| qualcomm | snapdragon_4_gen_2_mobile_platform | * |
| qualcomm | snapdragon_460_mobile_platform_firmware | * |
| qualcomm | snapdragon_460_mobile_platform | * |
| qualcomm | snapdragon_480_5g_mobile_platform_firmware | * |
| qualcomm | snapdragon_480_5g_mobile_platform | * |
| qualcomm | snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware | * |
| qualcomm | snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\) | * |
| qualcomm | snapdragon_6_gen_1_mobile_platform_firmware | * |
| qualcomm | snapdragon_6_gen_1_mobile_platform | * |
| qualcomm | snapdragon_662_mobile_platform_firmware | * |
| qualcomm | snapdragon_662_mobile_platform | * |
| qualcomm | snapdragon_680_4g_mobile_platform_firmware | * |
| qualcomm | snapdragon_680_4g_mobile_platform | * |
| qualcomm | snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware | * |
| qualcomm | snapdragon_685_4g_mobile_platform_\(sm6225-ad\) | * |
| qualcomm | snapdragon_695_5g_mobile_platform_firmware | * |
| qualcomm | snapdragon_695_5g_mobile_platform | * |
| qualcomm | snapdragon_7_gen_1_mobile_platform_firmware | * |
| qualcomm | snapdragon_7_gen_1_mobile_platform | * |
| qualcomm | snapdragon_7\+_gen_2_mobile_platform_firmware | * |
| qualcomm | snapdragon_7\+_gen_2_mobile_platform | * |
| qualcomm | snapdragon_778g_5g_mobile_platform_firmware | * |
| qualcomm | snapdragon_778g_5g_mobile_platform | * |
| qualcomm | snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\)_firmware | * |
| qualcomm | snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\) | * |
| qualcomm | snapdragon_782g_mobile_platform_\(sm7325-af\)_firmware | * |
| qualcomm | snapdragon_782g_mobile_platform_\(sm7325-af\) | * |
| qualcomm | snapdragon_7c\+_gen_3_compute_firmware | * |
| qualcomm | snapdragon_7c\+_gen_3_compute | * |
| qualcomm | snapdragon_8_gen_1_mobile_platform_firmware | * |
| qualcomm | snapdragon_8_gen_1_mobile_platform | * |
| qualcomm | snapdragon_8_gen_2_mobile_platform_firmware | * |
| qualcomm | snapdragon_8_gen_2_mobile_platform | * |
| qualcomm | snapdragon_8_gen_3_mobile_platform_firmware | * |
| qualcomm | snapdragon_8_gen_3_mobile_platform | * |
| qualcomm | snapdragon_8\+_gen_1_mobile_platform_firmware | * |
| qualcomm | snapdragon_8\+_gen_1_mobile_platform | * |
| qualcomm | snapdragon_8\+_gen_2_mobile_platform_firmware | * |
| qualcomm | snapdragon_8\+_gen_2_mobile_platform | * |
| qualcomm | snapdragon_888_5g_mobile_platform_firmware | * |
| qualcomm | snapdragon_888_5g_mobile_platform | * |
| qualcomm | snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)_firmware | * |
| qualcomm | snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\) | * |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware | * |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\) | * |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware | * |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\) | * |
| qualcomm | snapdragon_ar1_gen_1_platform_firmware | * |
| qualcomm | snapdragon_ar1_gen_1_platform | * |
| qualcomm | snapdragon_ar1_gen_1_platform_\luna1\_firmware | * |
| qualcomm | snapdragon_ar1_gen_1_platform_\luna1\ | * |
| qualcomm | snapdragon_ar2_gen_1_platform_firmware | * |
| qualcomm | snapdragon_ar2_gen_1_platform | * |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2_firmware | * |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2 | * |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform_firmware | * |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform | * |
| qualcomm | snapdragon_x32_5g_modem-rf_system_firmware | * |
| qualcomm | snapdragon_x32_5g_modem-rf_system | * |
| qualcomm | snapdragon_x35_5g_modem-rf_system_firmware | * |
| qualcomm | snapdragon_x35_5g_modem-rf_system | * |
| qualcomm | snapdragon_x65_5g_modem-rf_system_firmware | * |
| qualcomm | snapdragon_x65_5g_modem-rf_system | * |
| qualcomm | snapdragon_x70_modem-rf_system_firmware | * |
| qualcomm | snapdragon_x70_modem-rf_system | * |
| qualcomm | snapdragon_x72_5g_modem-rf_system_firmware | * |
| qualcomm | snapdragon_x72_5g_modem-rf_system | * |
| qualcomm | snapdragon_x75_5g_modem-rf_system_firmware | * |
| qualcomm | snapdragon_x75_5g_modem-rf_system | * |
| qualcomm | srv1h_firmware | * |
| qualcomm | srv1h | * |
| qualcomm | srv1l_firmware | * |
| qualcomm | srv1l | * |
| qualcomm | srv1m_firmware | * |
| qualcomm | srv1m | * |
| qualcomm | ssg2115p_firmware | * |
| qualcomm | ssg2115p | * |
| qualcomm | ssg2125p_firmware | * |
| qualcomm | ssg2125p | * |
| qualcomm | sw5100_firmware | * |
| qualcomm | sw5100 | * |
| qualcomm | sw5100p_firmware | * |
| qualcomm | sw5100p | * |
| qualcomm | sxr1230p_firmware | * |
| qualcomm | sxr1230p | * |
| qualcomm | sxr2230p_firmware | * |
| qualcomm | sxr2230p | * |
| qualcomm | sxr2250p_firmware | * |
| qualcomm | sxr2250p | * |
| qualcomm | wcd9335_firmware | * |
| qualcomm | wcd9335 | * |
| qualcomm | wcd9340_firmware | * |
| qualcomm | wcd9340 | * |
| qualcomm | wcd9370_firmware | * |
| qualcomm | wcd9370 | * |
| qualcomm | wcd9371_firmware | * |
| qualcomm | wcd9371 | * |
| qualcomm | wcd9375_firmware | * |
| qualcomm | wcd9375 | * |
| qualcomm | wcd9378_firmware | * |
| qualcomm | wcd9378 | * |
| qualcomm | wcd9380_firmware | * |
| qualcomm | wcd9380 | * |
| qualcomm | wcd9385_firmware | * |
| qualcomm | wcd9385 | * |
| qualcomm | wcd9390_firmware | * |
| qualcomm | wcd9390 | * |
| qualcomm | wcd9395_firmware | * |
| qualcomm | wcd9395 | * |
| qualcomm | wcn3910_firmware | * |
| qualcomm | wcn3910 | * |
| qualcomm | wcn3950_firmware | * |
| qualcomm | wcn3950 | * |
| qualcomm | wcn3980_firmware | * |
| qualcomm | wcn3980 | * |
| qualcomm | wcn3988_firmware | * |
| qualcomm | wcn3988 | * |
| qualcomm | wcn6650_firmware | * |
| qualcomm | wcn6650 | * |
| qualcomm | wcn6740_firmware | * |
| qualcomm | wcn6740 | * |
| qualcomm | wcn6755_firmware | * |
| qualcomm | wcn6755 | * |
| qualcomm | wcn7750_firmware | * |
| qualcomm | wcn7750 | * |
| qualcomm | snapdragon_8_gen_1_firmware | * |
| qualcomm | snapdragon_8_gen_1 | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-190 | The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves memory corruption that occurs while routing GPR packets between user and root processes when handling large data packets.
How can this vulnerability impact me? :
The vulnerability can lead to high impact on confidentiality, integrity, and availability of the system, potentially allowing an attacker with low privileges to cause serious damage or unauthorized access due to memory corruption.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70