ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2025-47388

Qualcomm Snapdragon

Buffer Copy without Checking Size of Input in DSP Service

CVSS 3.1
7.8بالا

شرح رسمی (انگلیسی)

Memory corruption while passing pages to DSP with an unaligned starting address.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.8بالا 3.1 CVEProject cvelistV5 (CNA) (qualcomm) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Qualcomm, Inc. Snapdragon FastConnect 6200 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6700 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6900 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 7800 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCS610 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QMP1000 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC1 Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC3 Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SG6150 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SG6150P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM6475 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7435 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8735 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8750 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8750P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SW5100 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SW5100P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SXR2330P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SXR2350P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 4 Gen 2 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 6 Gen 1 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon W5+ Gen 1 Wearable Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9370 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9375 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9378 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9380 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9385 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9395 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3950 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3980 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3988 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN6755 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7750 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7860 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7861 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7880 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7881 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8810 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8815 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8830 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8832 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8835 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8840 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845H CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۴/۱۰/۱۷
آخرین به‌روزرسانی
۱۴۰۴/۱۰/۱۷
وضعیت
منتشرشده
صادرکننده (CNA)
qualcomm

پیش‌بینی بهره‌برداری (EPSS)

۰٫۰۸٪
احتمال بهره‌برداری در ۳۰ روز
۰٫۱٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-120
    Buffer Copy Without Checking Size of Input ('Classic Buffer Overflow')