BDU:2025-15925

Опубликовано: 04 фев. 2025

Источник: fstec

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm связана с записью за границами буфера. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код

Вендор

Qualcomm Technologies Inc.

Наименование ПО

WCD9380

WSA8830

WSA8835

AQT1000

AR8031

AR8035

CSRA6620

CSRA6640

WCD9371

Snapdragon 429 Mobile Platform

Snapdragon 855 Mobile Platform

Snapdragon 855+/860 Mobile Platform (SM8150-AC)

Snapdragon 865 5G Mobile Platform

Snapdragon 865+ 5G Mobile Platform (SM8250-AB)

Snapdragon 870 5G Mobile Platform (SM8250-AC)

Snapdragon W5+ Gen 1 Wearable Platform

Snapdragon X55 5G Modem-RF System

Snapdragon XR2 5G Platform

Snapdragon Auto 4G Modem

Snapdragon 888 5G Mobile Platform

Snapdragon 888+ 5G Mobile Platform (SM8350-AC)

Snapdragon 765 5G Mobile Platform (SM7250-AA)

Snapdragon 765G 5G Mobile Platform (SM7250-AB)

Snapdragon 768G 5G Mobile Platform (SM7250-AC)

Snapdragon 4 Gen 1 Mobile Platform

Snapdragon 460 Mobile Platform

Snapdragon 480 5G Mobile Platform

Snapdragon 480+ 5G Mobile Platform (SM4350-AC)

Snapdragon 662 Mobile Platform

Snapdragon 680 4G Mobile Platform

Snapdragon 685 4G Mobile Platform (SM6225-AD)

Snapdragon 690 5G Mobile Platform

Snapdragon 695 5G Mobile Platform

Snapdragon 720G Mobile Platform

Snapdragon 778G 5G Mobile Platform

Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)

Snapdragon 782G Mobile Platform (SM7325-AF)

Snapdragon XR2+ Gen 1 Platform

Qualcomm 215 Mobile Platform

Snapdragon 8 Gen 2 Mobile Platform

Snapdragon 8+ Gen 2 Mobile Platform

Snapdragon Auto 5G Modem-RF

Snapdragon X75 5G Modem-RF System

SA4155P

SA8770P

Snapdragon X12 LTE Modem

QCA2066

QCA6564AU

QCA6574

QCA6574A

QCA6574AU

QCA6584AU

QCA6678AQ

C-V2X 9150

Snapdragon 8 Gen 3 Mobile Platform

Snapdragon Auto 5G Modem-RF Gen 2

Snapdragon X35 5G Modem-RF System

Snapdragon XR1 Platform

SXR1120

Vision Intelligence 100 Platform (APQ8053-AA)

Vision Intelligence 200 Platform (APQ8053-AC)

SA4150P

SA8775P

9206 LTE Modem

Snapdragon 1200 Wearable Platform

Snapdragon X5 LTE Modem

SA7775P

SA8620P

SA8650P

Snapdragon X72 5G Modem-RF System

SRV1H

SRV1M

QCA6688AQ

SA2150P

SM4635

FastConnect 6700

FastConnect 6900

FastConnect 7800

WCD9370

WCD9390

WCD9395

WCN3950

WSA8810

WSA8815

WSA8832

WSA8840

WSA8845

WSA8845H

QAM8255P

QAM8295P

QAM8650P

QAM8775P

QAMSRV1H

QAMSRV1M

QCA6595

QCA6595AU

QCA6696

QCA6698AQ

QCA6797AQ

QCA8081

QCA8337

QCC710

QCM5430

QCM6490

QCM8550

QCN6224

QCN6274

QCN9012

QCS410

QCS5430

QCS610

QCS6490

QCS8550

QFW7114

QFW7124

SA6155P

SA7255P

SA8155P

SA8195P

SA8255P

SA8295P

SA9000P

SDX55

SM6650

SM7635

SM7675

SM7675P

SM8550P

SM8635

SM8635P

WCD9340

WCD9341

WCD9375

WCD9378

WCD9385

WCN3980

WCN3988

WCN6650

WCN6755

SM6650P

SM8650Q

Snapdragon X32 5G Modem-RF System

SM7635P

APQ8017

FastConnect 6200

FastConnect 6800

Flight RB5 5G Platform

QCA6174A

QCA6391

QCM2290

QCM6125

QCN9011

QCS2290

QCS6125

QCS7230

QCS8250

QEP8111

QRB5165M

QRB5165N

Robotics RB2 Platform

Robotics RB5 Platform

SA6145P

SA6150P

SA6155

SA8145P

SA8150P

SA8155

SD626

SD855

SD865 5G

SDM429W

SG4150P

SG8275P

SM7250P

SM7325P

Smart Audio 400 Platform

Smart Display 200 Platform (APQ5053-AA)

Snapdragon 625 Mobile Platform

Snapdragon 626 Mobile Platform

Snapdragon 7c+ Gen 3 Compute

SW5100

SW5100P

WCD9326

WCD9335

WCN3615

WCN3620

WCN3660B

WCN3680B

WCN3910

WCN3990

CSRB31024

SD660

Snapdragon 660 Mobile Platform

Snapdragon 820 Automotive Platform

Vision Intelligence 300 Platform

Vision Intelligence 400 Platform

QCA6564A

QCA9377

MSM8996AU

QCA6564

WCD9360

Qualcomm Video Collaboration VC1 Platform

Qualcomm Video Collaboration VC3 Platform

Qualcomm Video Collaboration VC5 Platform

MDM9250

MDM9628

MDM9640

QCA6584

QCA9367

SG8275

SM7550

SM7550P

WCD9330

Версия ПО

- (WCD9380)

- (WSA8830)

- (WSA8835)

- (AQT1000)

- (AR8031)

- (AR8035)

- (CSRA6620)

- (CSRA6640)

- (WCD9371)

- (Snapdragon 429 Mobile Platform)

- (Snapdragon 855 Mobile Platform)

- (Snapdragon 855+/860 Mobile Platform (SM8150-AC))

- (Snapdragon 865 5G Mobile Platform)

- (Snapdragon 865+ 5G Mobile Platform (SM8250-AB))

- (Snapdragon 870 5G Mobile Platform (SM8250-AC))

- (Snapdragon W5+ Gen 1 Wearable Platform)

- (Snapdragon X55 5G Modem-RF System)

- (Snapdragon XR2 5G Platform)

- (Snapdragon Auto 4G Modem)

- (Snapdragon 888 5G Mobile Platform)

- (Snapdragon 888+ 5G Mobile Platform (SM8350-AC))

- (Snapdragon 765 5G Mobile Platform (SM7250-AA))

- (Snapdragon 765G 5G Mobile Platform (SM7250-AB))

- (Snapdragon 768G 5G Mobile Platform (SM7250-AC))

- (Snapdragon 4 Gen 1 Mobile Platform)

- (Snapdragon 460 Mobile Platform)

- (Snapdragon 480 5G Mobile Platform)

- (Snapdragon 480+ 5G Mobile Platform (SM4350-AC))

- (Snapdragon 662 Mobile Platform)

- (Snapdragon 680 4G Mobile Platform)

- (Snapdragon 685 4G Mobile Platform (SM6225-AD))

- (Snapdragon 690 5G Mobile Platform)

- (Snapdragon 695 5G Mobile Platform)

- (Snapdragon 720G Mobile Platform)

- (Snapdragon 778G 5G Mobile Platform)

- (Snapdragon 778G+ 5G Mobile Platform (SM7325-AE))

- (Snapdragon 782G Mobile Platform (SM7325-AF))

- (Snapdragon XR2+ Gen 1 Platform)

- (Qualcomm 215 Mobile Platform)

- (Snapdragon 8 Gen 2 Mobile Platform)

- (Snapdragon 8+ Gen 2 Mobile Platform)

- (Snapdragon Auto 5G Modem-RF)

- (Snapdragon X75 5G Modem-RF System)

- (SA4155P)

- (SA8770P)

- (Snapdragon X12 LTE Modem)

- (QCA2066)

- (QCA6564AU)

- (QCA6574)

- (QCA6574A)

- (QCA6574AU)

- (QCA6584AU)

- (QCA6678AQ)

- (C-V2X 9150)

- (Snapdragon 8 Gen 3 Mobile Platform)

- (Snapdragon Auto 5G Modem-RF Gen 2)

- (Snapdragon X35 5G Modem-RF System)

- (Snapdragon XR1 Platform)

- (SXR1120)

- (Vision Intelligence 100 Platform (APQ8053-AA))

- (Vision Intelligence 200 Platform (APQ8053-AC))

- (SA4150P)

- (SA8775P)

- (9206 LTE Modem)

- (Snapdragon 1200 Wearable Platform)

- (Snapdragon X5 LTE Modem)

- (SA7775P)

- (SA8620P)

- (SA8650P)

- (Snapdragon X72 5G Modem-RF System)

- (SRV1H)

- (SRV1M)

- (QCA6688AQ)

- (SA2150P)

- (SM4635)

- (FastConnect 6700)

- (FastConnect 6900)

- (FastConnect 7800)

- (WCD9370)

- (WCD9390)

- (WCD9395)

- (WCN3950)

- (WSA8810)

- (WSA8815)

- (WSA8832)

- (WSA8840)

- (WSA8845)

- (WSA8845H)

- (QAM8255P)

- (QAM8295P)

- (QAM8650P)

- (QAM8775P)

- (QAMSRV1H)

- (QAMSRV1M)

- (QCA6595)

- (QCA6595AU)

- (QCA6696)

- (QCA6698AQ)

- (QCA6797AQ)

- (QCA8081)

- (QCA8337)

- (QCC710)

- (QCM5430)

- (QCM6490)

- (QCM8550)

- (QCN6224)

- (QCN6274)

- (QCN9012)

- (QCS410)

- (QCS5430)

- (QCS610)

- (QCS6490)

- (QCS8550)

- (QFW7114)

- (QFW7124)

- (SA6155P)

- (SA7255P)

- (SA8155P)

- (SA8195P)

- (SA8255P)

- (SA8295P)

- (SA9000P)

- (SDX55)

- (SM6650)

- (SM7635)

- (SM7675)

- (SM7675P)

- (SM8550P)

- (SM8635)

- (SM8635P)

- (WCD9340)

- (WCD9341)

- (WCD9375)

- (WCD9378)

- (WCD9385)

- (WCN3980)

- (WCN3988)

- (WCN6650)

- (WCN6755)

- (SM6650P)

- (SM8650Q)

- (Snapdragon X32 5G Modem-RF System)

- (SM7635P)

- (APQ8017)

- (FastConnect 6200)

- (FastConnect 6800)

- (Flight RB5 5G Platform)

- (QCA6174A)

- (QCA6391)

- (QCM2290)

- (QCM6125)

- (QCN9011)

- (QCS2290)

- (QCS6125)

- (QCS7230)

- (QCS8250)

- (QEP8111)

- (QRB5165M)

- (QRB5165N)

- (Robotics RB2 Platform)

- (Robotics RB5 Platform)

- (SA6145P)

- (SA6150P)

- (SA6155)

- (SA8145P)

- (SA8150P)

- (SA8155)

- (SD626)

- (SD855)

- (SD865 5G)

- (SDM429W)

- (SG4150P)

- (SG8275P)

- (SM7250P)

- (SM7325P)

- (Smart Audio 400 Platform)

- (Smart Display 200 Platform (APQ5053-AA))

- (Snapdragon 625 Mobile Platform)

- (Snapdragon 626 Mobile Platform)

- (Snapdragon 7c+ Gen 3 Compute)

- (SW5100)

- (SW5100P)

- (WCD9326)

- (WCD9335)

- (WCN3615)

- (WCN3620)

- (WCN3660B)

- (WCN3680B)

- (WCN3910)

- (WCN3990)

- (CSRB31024)

- (SD660)

- (Snapdragon 660 Mobile Platform)

- (Snapdragon 820 Automotive Platform)

- (Vision Intelligence 300 Platform)

- (Vision Intelligence 400 Platform)

- (QCA6564A)

- (QCA9377)

- (MSM8996AU)

- (QCA6564)

- (WCD9360)

- (Qualcomm Video Collaboration VC1 Platform)

- (Qualcomm Video Collaboration VC3 Platform)

- (Qualcomm Video Collaboration VC5 Platform)

- (MDM9250)

- (MDM9628)

- (MDM9640)

- (QCA6584)

- (QCA9367)

- (SG8275)

- (SM7550)

- (SM7550P)

- (WCD9330)

Тип ПО

Микропрограммный код

Сетевое средство

Микропрограммный код аппаратных компонент компьютера

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Средний уровень опасности (базовая оценка CVSS 2.0 составляет 6,8)

Высокий уровень опасности (базовая оценка CVSS 3.1 составляет 7,8)

Возможные меры по устранению уязвимости

Использование рекомендаций производителя:

https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html

Идентификаторы других систем описаний уязвимостей

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-47320
CVE

EPSS

Процентиль: 2%

0.00015

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Связанные уязвимости

CVE-2025-47320

CVSS3: 7.8

nvd

около 2 месяцев назад

Memory corruption while processing MFC channel configuration during music playback.

GHSA-25c8-fq6j-8vvf

CVSS3: 7.8

github

около 2 месяцев назад

Memory corruption while processing MFC channel configuration during music playback.

EPSS

Процентиль: 2%

0.00015

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2