high7.8
CVE-2025-47389
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
Impact
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Ar8035 Firmware | All versions |
| Qualcomm | Cologne Firmware | All versions |
| Qualcomm | Csra6620 Firmware | All versions |
| Qualcomm | Csra6640 Firmware | All versions |
| Qualcomm | Fastconnect 6200 Firmware | All versions |
| Qualcomm | Snapdragon X35 5g Modem-Rf System Firmware | All versions |
| Qualcomm | Snapdragon X53 5g Modem-Rf System Firmware | All versions |
| Qualcomm | Snapdragon X55 5g Modem-Rf System Firmware | All versions |
| Qualcomm | Snapdragon X72 5g Modem-Rf System Firmware | All versions |
| Qualcomm | Snapdragon X75 5g Modem-Rf System Firmware | All versions |
| Qualcomm | Snapdragon Xr2\+ Gen 1 Platform Firmware | All versions |
| Qualcomm | Snapdragon Xr2 5g Platform Firmware | All versions |