CVE-2025-47316

Q: What is the severity of CVE-2025-47316?

CVE-2025-47316 has a CVSS score of 7.8 (HIGH). This vulnerability allows memory corruption through a double-free condition when multiple threads race to set the timestamp store. Attackers could potentially execute arbitrary code or cause denial of service. This affects Qualcomm products using vulnerable timestamp store implementations.

7.8 HIGH

📋 TL;DR

This vulnerability allows memory corruption through a double-free condition when multiple threads race to set the timestamp store. Attackers could potentially execute arbitrary code or cause denial of service. This affects Qualcomm products using vulnerable timestamp store implementations.

💻 Affected Systems

Products:

Qualcomm chipsets and associated software

Versions: Specific versions not detailed in reference; check Qualcomm advisory

Operating Systems: Android, Linux-based systems using Qualcomm components

Default Config Vulnerable: ⚠️ Yes

Notes: Affects systems with multi-threaded timestamp store operations

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Remote code execution leading to complete system compromise and data exfiltration

🟠

Likely Case

Application crash or denial of service affecting system stability

🟢

If Mitigated

Limited impact with proper memory protection mechanisms and exploit mitigations

🌐 Internet-Facing: MEDIUM - Requires specific race condition timing but could be exploited remotely

🏢 Internal Only: MEDIUM - Similar risk profile for internal systems with vulnerable components

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: HIGH - Requires precise race condition timing

Exploitation requires multi-threaded access to vulnerable component

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check Qualcomm September 2025 security bulletin

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html

Restart Required: Yes

Instructions:

1. Review Qualcomm September 2025 security bulletin
2. Apply vendor-provided firmware/software updates
3. Reboot affected systems

🔧 Temporary Workarounds

Disable multi-threaded timestamp operations

all

Prevent race conditions by restricting concurrent access

System-specific configuration required

🧯 If You Can't Patch

Implement strict access controls to limit who can trigger timestamp operations
Deploy exploit mitigation technologies (ASLR, DEP, stack canaries)

🔍 How to Verify

Check if Vulnerable:

Check system firmware/software version against Qualcomm advisory

Check Version:

System-specific command (e.g., 'cat /proc/version' for Linux)

Verify Fix Applied:

Verify updated version matches patched version in Qualcomm bulletin

📡 Detection & Monitoring

Log Indicators:

Application crashes with memory corruption errors
Unexpected process terminations

Network Indicators:

Unusual traffic patterns to timestamp-related services

SIEM Query:

Process termination events with memory access violation codes

📊 Metadata

CVE ID: CVE-2025-47316

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-415

EPSS Score: 0.01% exploit probability (2.4th percentile)

Published: September 24, 2025

Last Updated: September 25, 2025

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Aqt1000 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6800 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6420 Firmware by Qualcomm

Qca6430 Firmware by Qualcomm

Sc8380xp Firmware by Qualcomm

Snapdragon 7c\+ Gen 3 Compute Firmware by Qualcomm

Snapdragon 8c Compute Platform \(sc8180x Ad\) Firmware by Qualcomm

Snapdragon 8cx Compute Platform \(sc8180x Aa\) Firmware by Qualcomm

Snapdragon 8cx Compute Platform \(sc8180x Ab\) Firmware by Qualcomm

Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180x Ac\) Firmware by Qualcomm

Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180x Af\) Firmware by Qualcomm

Snapdragon 8cx Gen 3 Compute Platform \(sc8280xp Ab\) Firmware by Qualcomm

Snapdragon 8cx Gen 3 Compute Platform \(sc8280xp Bb\) Firmware by Qualcomm

Wcd9340 Firmware by Qualcomm

Wcd9341 Firmware by Qualcomm

Wcd9380 Firmware by Qualcomm

Wcd9385 Firmware by Qualcomm

Wsa8810 Firmware by Qualcomm

Wsa8815 Firmware by Qualcomm

Wsa8830 Firmware by Qualcomm

Wsa8835 Firmware by Qualcomm

Wsa8840 Firmware by Qualcomm

Wsa8845 Firmware by Qualcomm

Wsa8845h Firmware by Qualcomm