What is the CVSS score of CVE-2025-47351?

CVE-2025-47351 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Qualcomm Chipset Firmware are affected by CVE-2025-47351?

A high-severity memory corruption flaw in Qualcomm FastConnect, Snapdragon, and related wireless/audio chipset firmware may let a local attacker with low privileges execute code or escalate…

How to fix or mitigate CVE-2025-47351?

Within 24 hours, inventory all endpoints and infrastructure using affected Qualcomm firmware in FastConnect 6200/6700/6900/7800, SG6150(P), SM8750(P), SM8850(P), and WCD/WCN/WSA series, confirm that no vendor-released patch is available, and restrict local device access to trusted users while monitoring for abnormal privilege escalation or crashes in the targeted connectivity/audio subsystems. Within 7 days, engage Qualcomm and device OEMs for mitigation guidance and firmware release timelines, apply any available vendor workarounds or configuration hardening, and assess whether high-risk users can be moved to unaffected devices; maintain enhanced logging on affected models. Within 30 days, deploy OEM firmware updates as soon as they are released for each listed chipset, validate patch levels across the fleet, and document residual risk and exceptions for devices that cannot be updated, with compensating controls such as local-access restrictions and application allowlisting.

Qualcomm Chipset Firmware CVE-2025-47351

HIGH

Integer Overflow or Wraparound (CWE-190)

2025-10-09 product-security@qualcomm.com

Buffer Overflow Integer Overflow Qualcomm Fastconnect 6200 Firmware Fastconnect 6700 Firmware Fastconnect 6900 Firmware Fastconnect 7800 Firmware Sg6150 Firmware Sg6150p Firmware Sm8750 Firmware Sm8750p Firmware Wcd9370 Firmware Wcd9375 Firmware Wcd9385 Firmware Wcd9395 Firmware Wcn3950 Firmware Wcn3988 Firmware Wcn7860 Firmware Wcn7861 Firmware Wcn7880 Firmware Wcn7881 Firmware Wsa8810 Firmware Wsa8815 Firmware Wsa8830 Firmware Wsa8832 Firmware Wsa8835 Firmware Wsa8840 Firmware Wsa8845 Firmware Wsa8845h Firmware Sm8850 Firmware Sm8850P Firmware

7.8

CVSS 3.1 · Vendor: qualcomm

Severity by source

Vendor (qualcomm) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local low-privilege app submits a crafted buffer (AV:L/PR:L/AC:L/UI:N); integer overflow yields memory corruption with full code-execution potential, so C/I/A all High.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (qualcomm).

CVSS VectorVendor: qualcomm

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Metadata Corrected

Oct 08, 2026 - 14:40 vuln.today

tag: Qualcomm added

Analysis Generated

Oct 08, 2026 - 14:09 vuln.today

CVE Published

Oct 09, 2025 - 04:16 cve.org

HIGH 7.8

DescriptionCVE.org

Memory corruption while processing user buffers.

AnalysisAI

Memory corruption in Qualcomm chipset firmware (FastConnect, Snapdragon, and associated audio/connectivity chips) allows local attackers with low privileges to execute code or escalate privileges by submitting crafted user buffers to the vulnerable buffer-handling code. The integer overflow (CWE-190) requires on-device execution and an active targeted subsystem; no public exploit code has been identified as of analysis, and the EPSS score is low at 0.09%. Affected firmware includes FastConnect 6200/6700/6900/7800, SG6150(P), SM8750(P), SM8850(P), and WCD/WCN/WSA series.

Technical ContextAI

The vulnerability is an integer overflow (CWE-190) in the buffer processing routines of multiple Qualcomm firmware components. These components include FastConnect 6200/6700/6900/7800 (WiFi/Bluetooth), Snapdragon SG6150/SG6150P, SM8750/SM8750P, SM8850/SM8850P mobile platforms, and various WCD audio codecs, WCN connectivity chips, and WSA audio amplifiers. When a user-supplied buffer size is not properly validated, an integer wrap-around can occur, leading to memory corruption (e.g., heap or stack overflow). The CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates that exploitation requires local access with low privileges, no user interaction, and results in high confidentiality, integrity, and availability impact. The attack surface is typically a driver or firmware interface accessible from a malicious application already running on the device, and the vulnerable code path must be reachable through the specific subsystem (e.g., WiFi, Bluetooth, audio) being in use.

RemediationAI

Apply the latest firmware updates provided by your device manufacturer (OEM) as referenced in the Qualcomm October 2025 security bulletin (https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html); patch availability is per vendor advisory because exact fix versions are OEM-specific. As a workaround, users should avoid installing untrusted applications, keep the device locked and restrict physical access, and disable developer options or debugging interfaces when not needed. Because the vulnerability requires local access with low privileges, maintaining strict app sandboxing and vetting of installed apps reduces risk. Disabling the affected wireless or audio subsystem (e.g., WiFi/Bluetooth) would eliminate the attack surface but at a significant functional cost and is not recommended for typical users.