Skip to content
OpenAdvisories
Critical · 9.0 CVE-2025-47372 EUVD-2025-204025GHSA-c52x-7cpj-qw5f

Buffer Copy Without Checking Size of Input in Boot

Published Dec 18, 2025 · Updated Dec 18, 2025 · Assigned by qualcomm

Description

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon QAM8255P, QAM8620P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6595, QCA6595AU, QCA6678AQ, QCA6696, QCA6698AQ, QCA6797AQ, SA7255P, SA7775P, SA8255P, SA8620P, SA8650P, SA8770P, SA8775P, SA9000P, SRV1H, SRV1L, SRV1M —

Advisories 2

References