What is the CVSS score of CVE-2025-47366?

CVE-2025-47366 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Sw5100 Firmware are affected by CVE-2025-47366?

CVE-2025-47366 is a cryptographic vulnerability affecting systems with outdated Trusted Zone code that can be exploited when the high-level operating system provides malformed input.

How to fix or mitigate CVE-2025-47366?

Within 24 hours: Identify all systems running affected Trusted Zone implementations and assess exposure in your environment. Within 7 days: Implement network segmentation to isolate affected systems and restrict their communication pathways; coordinate with device manufacturers for patch timelines. Within 30 days: Develop and deploy a patching strategy as vendor patches become available; enable enhanced logging on affected systems to detect exploitation attempts.

Sw5100 Firmware CVE-2025-47366

HIGH

Exposed Dangerous Method or Function (CWE-749)

2026-02-02 product-security@qualcomm.com

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:01 vuln.today

CVE Published

Feb 02, 2026 - 16:16 nvd

HIGH 7.1

DescriptionCVE.org

Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.

AnalysisAI

Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input. [CVSS 7.1 HIGH]

Technical ContextAI

Affects Ar8035 Firmware. Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.

RemediationAI

Monitor vendor advisories for a patch.

More in Sw5100 Firmware

View all

CVE-2026-21385 HIGH Act Now POC

7.8 Mar 02

A Qualcomm chipset vulnerability (CVE-2026-21385) causes memory corruption through improper integer handling during memo

CVE-2025-27038 HIGH Act Now

7.5 Jun 03

Qualcomm Adreno GPU drivers in Chrome contain a use-after-free vulnerability (CVE-2025-27038, CVSS 7.5) enabling memory

CVE-2024-21480 CRITICAL Act Now

9.8 May 06

Memory corruption while playing audio file having large-sized input buffer. Rated critical severity (CVSS 9.8), this vul

CVE-2024-21463 CRITICAL Act Now

9.8 Apr 01

Memory corruption while processing Codec2 during v13k decoder pitch synthesis. Rated critical severity (CVSS 9.8), this

CVE-2023-22388 CRITICAL Act Now

9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v

CVE-2023-22385 CRITICAL Act Now

9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner

CVE-2023-21631 CRITICAL Act Now

9.8 Jul 04

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received

CVE-2022-25748 CRITICAL Act Now

9.8 Oct 19

Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. Rated critical severity (

CVE-2022-25720 CRITICAL Act Now

9.8 Oct 19

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute

CVE-2022-25718 CRITICAL Act Now

9.8 Oct 19

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Sna

CVE-2022-25687 CRITICAL Act Now

9.8 Oct 19

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdr

CVE-2022-25688 CRITICAL Act Now

9.8 Sep 16

Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, S

Same weakness CWE-749 – Exposed Dangerous Method or Function

View all

CVE-2025-26651 MEDIUM

6.5

CVE-2025-59403 CRITICAL POC

9.8

CVE-2026-30957 CRITICAL POC

9.9

CVE-2026-30921 CRITICAL POC

9.9

CVE-2022-4136 CRITICAL POC

9.8

CVE-2016-9469 HIGH POC

8.2

CVE-2023-26478 HIGH POC

8.1

CVE-2019-5015 HIGH POC

7.8

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2025-47366 vulnerability details – vuln.today

Back

Sw5100 Firmware CVE-2025-47366

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Sw5100 Firmware

Same weakness CWE-749 – Exposed Dangerous Method or Function

Same technique Information Disclosure

Share

External POC / Exploit Code