ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2025-47317

Qualcomm Snapdragon

Buffer Over-read in BT Controller

CVSS 3.1
7.8بالا

شرح رسمی (انگلیسی)

Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.8بالا 3.1 CVEProject cvelistV5 (CNA) (qualcomm) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Qualcomm, Inc. Snapdragon FastConnect 6200 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6700 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 7800 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCC5161 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCC710 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCC711 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCC7225 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCC7226 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCC7228 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QMP1000 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon S3 Gen 2 Sound Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon S3 Sound Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon S5 Gen 2 Sound Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon S5 Sound Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM6475 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM6650 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM6650P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7435 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7550 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7550P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7635 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7635P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7675 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7675P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8635 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8635P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8735 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8750 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8750P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 6 Gen 1 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9370 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9371 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9375 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9378 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9385 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9390 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9395 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3988 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN6650 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN6755 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7750 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7860 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7861 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7880 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7881 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8810 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8815 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8830 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8832 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8835 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8840 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845H CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۴/۰۷/۰۲
آخرین به‌روزرسانی
۱۴۰۴/۱۲/۰۷
وضعیت
منتشرشده
صادرکننده (CNA)
qualcomm

پیش‌بینی بهره‌برداری (EPSS)

۰٫۰۸٪
احتمال بهره‌برداری در ۳۰ روز
۰٫۳٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-126
    Buffer Over-read