What is the CVSS score of CVE-2025-47385?

CVE-2025-47385 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Wsa8845 Firmware are affected by CVE-2025-47385?

CVE-2025-47385 is a high-severity memory corruption vulnerability affecting trusted execution environment (TEE) access that could allow attackers to escalate privileges and compromise sensitive data…

How to fix or mitigate CVE-2025-47385?

Within 24 hours: inventory all systems using the affected TEE technology and assess their exposure; establish monitoring for exploitation attempts. Within 7 days: implement network segmentation to restrict access to systems running the vulnerable TEE and disable TEE features if operationally feasible. Within 30 days: develop a detailed remediation plan with the vendor, conduct threat modeling for your specific deployment, and prepare for emergency patching upon vendor release.

Wsa8845 Firmware CVE-2025-47385

HIGH

Improper Access Control for Register Interface (CWE-1262)

2026-03-02 product-security@qualcomm.com

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 02, 2026 - 17:16 nvd

HIGH 7.8

DescriptionCVE.org

Memory Corruption when accessing trusted execution environment without proper privilege check.

AnalysisAI

Memory Corruption when accessing trusted execution environment without proper privilege check. [CVSS 7.8 HIGH]

Technical ContextAI

Affects Sa8295P Firmware. Memory Corruption when accessing trusted execution environment without proper privilege check.

RemediationAI

Monitor vendor advisories for a patch.

More in Wsa8845 Firmware

View all

CVE-2025-21480 HIGH Act Now

8.6 Jun 03

Qualcomm GPU micronode contains a memory corruption vulnerability (CVE-2025-21480, CVSS 8.6) caused by unauthorized comm

CVE-2025-21479 HIGH Act Now

8.6 Jun 03

A second Qualcomm GPU micronode memory corruption vulnerability (CVE-2025-21479, CVSS 8.6) exists in the unauthorized co

CVE-2026-21385 HIGH Act Now POC

7.8 Mar 02

A Qualcomm chipset vulnerability (CVE-2026-21385) causes memory corruption through improper integer handling during memo

CVE-2024-21480 CRITICAL Act Now

9.8 May 06

Memory corruption while playing audio file having large-sized input buffer. Rated critical severity (CVSS 9.8), this vul

CVE-2024-21463 CRITICAL Act Now

9.8 Apr 01

Memory corruption while processing Codec2 during v13k decoder pitch synthesis. Rated critical severity (CVSS 9.8), this

CVE-2023-33045 CRITICAL Act Now

9.8 Nov 07

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. Rated critical severity

CVE-2023-22388 CRITICAL Act Now

9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v

CVE-2023-33028 CRITICAL Act Now

9.8 Oct 03

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. Rated critical severity (CVSS 9.8), this vuln

CVE-2023-24855 CRITICAL Act Now

9.8 Oct 03

Memory corruption in Modem while processing security related configuration before AS Security Exchange. Rated critical s

CVE-2023-22385 CRITICAL Act Now

9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner

CVE-2025-21450 CRITICAL Act Now

9.1 Jul 08

Cryptographic issue occurs due to use of insecure connection method while downloading.

CVE-2024-38408 CRITICAL Act Now

9.1 Nov 04

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions. Rated critic

Same weakness CWE-1262 – Improper Access Control for Register Interface

View all

CVE-2023-20599 HIGH

7.9

CVE-2024-6354 HIGH

7.2

CVE-2024-45556 MEDIUM

6.5

CVE-2025-20788 MEDIUM

4.4

CVE-2025-54509 MEDIUM

4.0

CVE-2025-36194 LOW

2.8

Same technique Memory Corruption

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2014-0322 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-4792 HIGH POC

8.8

CVE-2010-3333 HIGH POC

7.8

CVE-2025-47385 vulnerability details – vuln.today

Back

Wsa8845 Firmware CVE-2025-47385

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Wsa8845 Firmware

Same weakness CWE-1262 – Improper Access Control for Register Interface

Same technique Memory Corruption

Share

External POC / Exploit Code