1. Home
  2. Vulnerabilities
  3. CVE-2025-47325
6.5
MEDIUM CVSS 3.1
CVE-2025-47325
Untrusted Pointer Dereference in TZ Firmware
Description

Information disclosure while processing system calls with invalid parameters.

INFO

Published Date :

Dec. 18, 2025, 6:15 a.m.

Last Modified :

Dec. 23, 2025, 9:54 p.m.

Remotely Exploit :

No

Source :

[email protected]
Affected Products

The following products are affected by CVE-2025-47325 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Qualcomm csr8811_firmware
2 Qualcomm ipq8070_firmware
3 Qualcomm ipq8070a_firmware
4 Qualcomm ipq8071_firmware
5 Qualcomm ipq8071a_firmware
6 Qualcomm ipq8072_firmware
7 Qualcomm ipq8072a_firmware
8 Qualcomm ipq8074_firmware
9 Qualcomm ipq8074a_firmware
10 Qualcomm ipq8076_firmware
11 Qualcomm ipq8076a_firmware
12 Qualcomm ipq8078_firmware
13 Qualcomm ipq8078a_firmware
14 Qualcomm ipq8173_firmware
15 Qualcomm ipq8174_firmware
16 Qualcomm pmp8074_firmware
17 Qualcomm qca4024_firmware
18 Qualcomm qca6428_firmware
19 Qualcomm qca6438_firmware
20 Qualcomm qca8072_firmware
21 Qualcomm qca8075_firmware
22 Qualcomm qca8081_firmware
23 Qualcomm qca9888_firmware
24 Qualcomm qca9889_firmware
25 Qualcomm qcn5022_firmware
26 Qualcomm qcn5024_firmware
27 Qualcomm qcn5052_firmware
28 Qualcomm qcn5054_firmware
29 Qualcomm qcn5122_firmware
30 Qualcomm qcn5124_firmware
31 Qualcomm qcn5152_firmware
32 Qualcomm qcn5154_firmware
33 Qualcomm qcn5164_firmware
34 Qualcomm qcn6023_firmware
35 Qualcomm qcn6024_firmware
36 Qualcomm qcn9000_firmware
37 Qualcomm qcn9022_firmware
38 Qualcomm qcn9024_firmware
39 Qualcomm qcn9070_firmware
40 Qualcomm qcn9072_firmware
41 Qualcomm qcn9074_firmware
42 Qualcomm sdx55_firmware
43 Qualcomm qcn5064_firmware
44 Qualcomm qcn5550_firmware
45 Qualcomm sdx55
46 Qualcomm csr8811
47 Qualcomm ipq8070
48 Qualcomm ipq8070a
49 Qualcomm ipq8071
50 Qualcomm ipq8071a
51 Qualcomm ipq8072
52 Qualcomm ipq8072a
53 Qualcomm ipq8074
54 Qualcomm ipq8074a
55 Qualcomm ipq8076
56 Qualcomm ipq8076a
57 Qualcomm ipq8078
58 Qualcomm ipq8078a
59 Qualcomm ipq8173
60 Qualcomm ipq8174
61 Qualcomm qca4024
62 Qualcomm qca6428
63 Qualcomm qca6438
64 Qualcomm qca8072
65 Qualcomm qca8075
66 Qualcomm qca8081
67 Qualcomm qca9888
68 Qualcomm qca9889
69 Qualcomm qcn5022
70 Qualcomm qcn5024
71 Qualcomm qcn5052
72 Qualcomm qcn5054
73 Qualcomm qcn5064
74 Qualcomm qcn5122
75 Qualcomm qcn5124
76 Qualcomm qcn5152
77 Qualcomm qcn5154
78 Qualcomm qcn5164
79 Qualcomm qcn5550
80 Qualcomm qcn9000
81 Qualcomm qcn9074
82 Qualcomm pmp8074
83 Qualcomm qcn6023
84 Qualcomm qcn6024
85 Qualcomm qcn9022
86 Qualcomm qcn9024
87 Qualcomm qcn9070
88 Qualcomm qcn9072
: Total Affected Vendor : 1 | Products : 88
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.
Score Version Severity Vector Exploitability Score Impact Score Source
CVSS 3.1 MEDIUM 2cfc7d3e-20d3-47ac-8db7-1b7285aff15f
CVSS 3.1 MEDIUM [email protected]
CVSS 3.1 MEDIUM [email protected]
Solution
Fix system call parameter validation to prevent information leaks.
  • Validate all system call parameters.
  • Sanitize user inputs.
  • Implement secure error handling.
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2025-47325.

URL Resource
https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html Vendor Advisory
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-47325 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-47325 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2025-47325 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2025-47325 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • Initial Analysis by [email protected]

    Dec. 23, 2025

    Action Type Old Value New Value
    Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:csr8811_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:csr8811:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8070_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8070:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8070a_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8070a:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8071_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8071:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8071a_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8071a:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8072_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8072:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8072a_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8072a:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8074a_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8074a:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8076_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8076:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8076a_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8076a:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8078_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8078:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8078a_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8078a:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8173_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8173:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:ipq8174_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:ipq8174:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:pmp8074_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:pmp8074:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qca4024_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qca4024:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qca6428_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qca6428:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qca6438_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qca6438:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qca8072_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qca8072:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qca8075_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qca8075:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qca9888_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qca9888:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qca9889_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qca9889:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn5022_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn5022:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn5024_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn5024:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn5052_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn5052:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn5054_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn5054:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn5064_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn5064:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn5122_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn5122:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn5124_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn5124:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn5152_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn5152:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn5154_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn5154:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn5164_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn5164:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn5550_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn5550:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn6023_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn6023:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn6024:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn9000_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn9000:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn9022_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn9022:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn9024:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn9070_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn9070:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn9072_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn9072:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:qcn9074:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:*
    Added Reference Type Qualcomm, Inc.: https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html Types: Vendor Advisory
  • New CVE Received by [email protected]

    Dec. 18, 2025

    Action Type Old Value New Value
    Added Description Information disclosure while processing system calls with invalid parameters.
    Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
    Added CWE CWE-822
    Added Reference https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Vulnerability Scoring Details
Base CVSS Score: 6.5
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact