EUVD-2025-209230Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Integer overflow checks
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | This vulnerability presents elevated real-world risk despite the adjacent network attack vector constraint. The CVSS vector (AV:A/AC:L/PR:N/UI:N) indicates attacks require adjacent network access but have low complexity, no privilege requirements, and no user interaction-meaning an attacker within wireless range (WiFi, Bluetooth, or satellite receiver proximity) can trigger exploitation automatically. The combination of high confidentiality, integrity, and availability impact (C:H/I:H/A:H) enables complete device compromise. However, the adjacent network vector significantly limits scalability compared to remote internet-based attacks. The attack surface is constrained to scenarios where attackers have physical proximity to target devices with active satellite communication interfaces. No EPSS score is provided, but the technical characteristics (integer overflow leading to buffer overflow, no authentication required) make this theoretically automatable for attackers with adjacent access. CISA KEV status is not confirmed, indicating no verified active exploitation campaigns. The presence of integer overflow and buffer overflow tags suggests established exploit techniques apply, though no public proof-of-concept is confirmed. Priority should focus on enterprise and government deployments using satellite-enabled Snapdragon devices in security-sensitive environments where adjacent network attacks are feasible. |
| Exploit ScenarioDerived | An attacker positions themselves within adjacent network range of a target device with vulnerable Snapdragon chipset and active satellite communication receiver, such as in a crowded public venue, enterprise campus, or through compromised nearby infrastructure. The attacker crafts a malicious satellite data file with manipulated signature offset fields designed to trigger integer overflow during offset calculations. By broadcasting this corrupted data through a software-defined radio or compromised satellite ground station equipment operating on the same frequency bands, the attacker causes the target device's satellite decoder to process the malformed file. The integer overflow results in undersized buffer allocation, and subsequent decoding operations overflow memory boundaries, allowing the attacker to overwrite critical memory structures with arbitrary data. This memory corruption enables code execution at the privilege level of the satellite communication subsystem, potentially granting full baseband processor access and leading to device compromise, data exfiltration, or persistent backdoor installation without any user interaction or authentication required. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 06, 2026
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution without authentication when processing malformed satellite data files containing invalid signature offsets. The vulnerability stems from an integer overflow (CWE-190) that leads to buffer overflow conditions during satellite data decoding. With a CVSS score of 8.8 and adjacent network attack vector, this represents a significant risk for devices with satellite communication capabilities in proximity-based attack scenarios. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
RemediationAI
Apply security patches released in Qualcomm's April 2026 Security Bulletin available at https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html. Device manufacturers (OEMs) must integrate Qualcomm's patched chipset firmware into their respective device software updates and distribute to end users through standard update mechanisms. End users should install the latest security updates from their device manufacturer as soon as available. For enterprise deployments, prioritize patching devices with active satellite communication features and those operating in environments where adjacent network access by untrusted parties is possible. If immediate patching is not feasible, consider disabling satellite communication functionality if not operationally required, implementing network segmentation to limit adjacent network attack surface, and restricting physical access to areas where satellite-enabled devices operate. Monitor Qualcomm and device manufacturer security advisories for additional guidance and confirmation of patched firmware versions.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
This vulnerability affects Qualcomm Snapdragon chipsets' satellite data processing subsystem, specifically the decoder responsible for validating and parsing satellite communication files. The root cause is an integer overflow (CWE-190) when calculating memory offsets based on signature field values in satellite data structures. When a corrupted file contains abnormally large or negative signature offset values, integer wraparound occurs during buffer size calculations, resulting in undersized memory allocation. Subsequent decoding operations then trigger buffer overflow conditions, corrupting adjacent memory regions. The affected component appears to be part of Qualcomm's satellite communication firmware or baseband processor implementation present across multiple Snapdragon chipset generations. The CPE identifier indicates broad impact across the Snapdragon product line, though specific SoC model numbers are not detailed in available data.
Know when Snapdragon gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (qualcomm) · only source for this CVE.
CVSS VectorVendor: qualcomm
DescriptionCVE.org
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
Executive ViewAI
CVE-2025-47392 is a critical memory corruption vulnerability affecting Qualcomm Snapdragon chipsets that enables unauthenticated arbitrary code execution on devices with satellite communication capabilities when processing malformed data files from adjacent network attackers. Organizations deploying Snapdragon-based devices-particularly in IoT, mobile, and satellite-enabled infrastructure-face elevated risk of device compromise and potential lateral network movement without immediate patching options.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Disable satellite communication functionality if not operationally required; (2) Implement strict network-based access controls to limit adjacent network attack surface; (3) Deploy application whitelisting on affected devices; (4) Establish enhanced monitoring for suspicious process execution and memory access patterns on Snapdragon devices; (5) Isolate satellite-enabled devices to segmented network zones with restricted lateral movement; (6) Monitor Qualcomm security advisories for patch availability and subscribe to vendor notifications.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Integer overflow occurs when an arithmetic operation produces a result that exceeds the maximum value a given integer type can store.
More in Snapdragon
View allRemote code execution in Qualcomm Snapdragon-based products allows unauthenticated network attackers to bypass authoriza
Buffer overflow in Qualcomm QCA7005 power-line communication (PLC) firmware can be reached by an unauthenticated attacke
Memory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Local privilege escalation in Qualcomm Snapdragon platforms allows a low-privilege on-device process or app to cross a t
Privilege escalation in Qualcomm Snapdragon devices allows a local low-privilege attacker to cross security boundaries a
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Stack-based memory corruption in Qualcomm Snapdragon firmware allows a locally-resident, low-privileged process to overf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Out-of-bounds memory access in Qualcomm Snapdragon platform firmware allows a locally authenticated low-privileged attac
GitHub PoC
Exploit-DB