Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-47325 EUVD-2025-204027GHSA-8pj9-4w5f-p42v

Untrusted Pointer Dereference in TZ Firmware

Published Dec 18, 2025 · Updated Dec 18, 2025 · Assigned by qualcomm

Description

Information disclosure while processing system calls with invalid parameters.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon CSR8811, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, PMP8074, QCA4024, QCA6428, QCA6438, QCA8072, QCA8075, QCA8081, QCA9888, QCA9889, QCN5022, QCN5024, QCN5052, QCN5054, QCN5064, QCN5122, QCN5124, QCN5152, QCN51… —

References