جزئیات آسیب‌پذیری

CVE-2025-47378

Qualcomm Snapdragon

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

CVSS 3.1
7.1بالا

شرح رسمی (انگلیسی)

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.1بالا 3.1 CVEProject cvelistV5 (CNA) (qualcomm) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Qualcomm, Inc. Snapdragon Cologne CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6700 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6800 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6900 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 7800 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon LeMansAU CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon LeMans_AU_LGIT CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Pandeiro CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QAM8255P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QAMSRV1H CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QAMSRV1M CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6391 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6595 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6595AU CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6696 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6698AQ CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6797AQ CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QLN1083BD CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QLN1086BD CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QPA1083BD CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QPA1086BD CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QXM1083 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QXM1086 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QXM1093 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QXM1094 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QXM1095 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QXM1096 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA7255P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA7775P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8255P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8620P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8770P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA9000P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SAR1165P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SAR1250P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SAR2130P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SAR2230P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SD865 5G CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SRV1H CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SRV1M CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SXR2230P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SXR2250P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8 Elite Gen 5 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 865 5G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 865+ 5G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 870 5G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon AR1 Gen 1 Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon AR1+ Gen 1 Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon X55 5G Modem-RF System CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon XR2 5G Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon XR2+ Gen 1 Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9378C CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9380 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9385 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9395 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3950 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7860 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7861 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8810 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8815 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8830 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8832 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8835 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8840 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845H CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon X2000077 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon X2000086 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon X2000090 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon X2000092 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon X2000094 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon XG101002 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon XG101032 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon XG101039 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۴/۱۲/۱۱
آخرین به‌روزرسانی
۱۴۰۴/۱۲/۱۲
وضعیت
منتشرشده
صادرکننده (CNA)
qualcomm

پیش‌بینی بهره‌برداری (EPSS)

۰٫۰۷٪
احتمال بهره‌برداری در ۳۰ روز
۰٫۱٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-497
    Exposure of Sensitive System Information to an Unauthorized Control Sphere