Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2025-47372

Buffer Copy Without Checking Size of Input in Boot

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qualcomm

Description

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • QAM8255Paffected
  • QAM8620Paffected
  • QAM8650Paffected
  • QAM8775Paffected
  • QAMSRV1Haffected
  • QAMSRV1Maffected
  • QCA6595affected
  • QCA6595AUaffected
  • QCA6678AQaffected
  • QCA6696affected
  • QCA6698AQaffected
  • QCA6797AQaffected
  • SA7255Paffected
  • SA7775Paffected
  • SA8255Paffected
  • SA8620Paffected
  • SA8650Paffected
  • SA8770Paffected
  • SA8775Paffected
  • SA9000Paffected
  • SRV1Haffected
  • SRV1Laffected
  • SRV1Maffected

References