CVE-2025-47385: Qualcomm, Inc. Snapdragon, заобикаляне на вход и права

7.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.

Описание

Оригинално описание

Memory Corruption when accessing trusted execution environment without proper privilege check.

Qualcomm, Inc. Snapdragon: FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; G2 Gen 1; LeMans_AU_LGIT; LeMansAU; Milos; Netrani; Orne; Palawan25; Pandeiro; QAM8255P; QAM8295P; QAMSRV1H; QAMSRV1M; QCA6574; QCA6574A; QCA6574AU; QCA6595; QCA6595AU; QCA6688AQ; QCA6696; QCA6698AQ; QCA6797AQ; QCA8695AU; QCA9367; QCA9377; QLN1083BD; QLN1086BD; QMP1000; QPA1083BD; QPA1086BD; QXM1083; QXM1086; QXM1093; QXM1094; QXM1095; QXM1096; SA6155P; SA7255P; SA7775P; SA8155P; SA8195P; SA8255P; SA8295P; SA8620P; SA8770P; SA9000P; SAR1165P; SAR1250P; SAR2230P; SM7435; SM8750P; Snapdragon 4 Gen 1 Mobile Platform; Snapdragon 4 Gen 2 Mobile Platform; Snapdragon 480 5G Mobile Platform; Snapdragon 480+ 5G Mobile Platform; Snapdragon 6 Gen 1 Mobile Platform; Snapdragon 6 Gen 3 Mobile Platform; Snapdragon 6 Gen 4 Mobile Platform; Snapdragon 695 5G Mobile Platform; Snapdragon 7s Gen 3 Mobile Platform; Snapdragon 8 Elite; Snapdragon AR1+ Gen 1 Platform; Snapdragon W5+ Gen 1 Wearable Platform; SRV1H; SRV1M; SW5100; SW5100P; SXR2330P; SXR2350P; WCD9370; WCD9375; WCD9378; WCD9380; WCD9385; WCD9395; WCN3950; WCN3988; WCN6450; WCN6755; WCN7860; WCN7861; WCN7880; WCN7881; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845; WSA8845H