CVE-2025-47318

Q: What is the severity of CVE-2025-47318?

CVE-2025-47318 has a CVSS score of 7.5 (HIGH). This vulnerability allows attackers to cause a denial of service (DoS) condition by sending specially crafted EPTM test control messages. It affects systems using Qualcomm components that process these messages, potentially impacting device availability and stability.

7.5 HIGH

Denial of Service

📋 TL;DR

This vulnerability allows attackers to cause a denial of service (DoS) condition by sending specially crafted EPTM test control messages. It affects systems using Qualcomm components that process these messages, potentially impacting device availability and stability.

💻 Affected Systems

Products:

Qualcomm chipsets and components with EPTM functionality

Versions: Specific versions not detailed in reference; check Qualcomm advisory for exact affected versions.

Operating Systems: Android, embedded systems using Qualcomm components

Default Config Vulnerable: ⚠️ Yes

Notes: Affects systems where EPTM test control message parsing is enabled, typically in Qualcomm-based devices.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete system crash or reboot, rendering the device unusable until manually restarted, potentially affecting critical operations.

🟠

Likely Case

Temporary service disruption or performance degradation affecting specific functions that rely on the vulnerable component.

🟢

If Mitigated

Minimal impact with proper network segmentation and input validation controls in place.

🌐 Internet-Facing: MEDIUM - Attackers could potentially exploit this remotely if vulnerable services are exposed to the internet.

🏢 Internal Only: MEDIUM - Internal attackers or compromised internal systems could exploit this to disrupt operations.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: LOW

Based on CWE-126 (Buffer Over-read), exploitation likely involves sending malformed messages to trigger the vulnerability.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check Qualcomm September 2025 security bulletin for specific patched versions.

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html

Restart Required: Yes

Instructions:

1. Review Qualcomm September 2025 security bulletin. 2. Identify affected components in your devices. 3. Apply firmware/software updates from device manufacturers. 4. Reboot affected systems after patching.

🔧 Temporary Workarounds

Network Segmentation

all

Restrict access to services that process EPTM messages to trusted networks only.

Input Validation

all

Implement additional validation for EPTM test control messages at application layer if possible.

🧯 If You Can't Patch

Implement strict network access controls to limit exposure of vulnerable services.
Monitor systems for unusual crash or restart patterns that might indicate exploitation attempts.

🔍 How to Verify

Check if Vulnerable:

Check device firmware/software version against Qualcomm's advisory; systems using affected Qualcomm components without September 2025 patches are vulnerable.

Check Version:

Device-specific; typically 'cat /proc/version' or manufacturer-specific commands for Android/embedded systems.

Verify Fix Applied:

Verify that firmware/software version matches or exceeds the patched version listed in Qualcomm's bulletin.

📡 Detection & Monitoring

Log Indicators:

Unexpected system crashes
Kernel panic logs
Service restart patterns related to message processing

Network Indicators:

Unusual inbound traffic to ports/services handling EPTM messages
Patterns of malformed network packets

SIEM Query:

source="system_logs" AND (event_type="crash" OR event_type="panic") AND process_name contains "eptm"

📊 Metadata

CVE ID: CVE-2025-47318

CVSS v3 Score: 7.5 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-126

EPSS Score: 0.06% exploit probability (18.5th percentile)

Published: September 24, 2025

Last Updated: November 28, 2025

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Apq8017 Firmware by Qualcomm

Apq8064au Firmware by Qualcomm

Aqt1000 Firmware by Qualcomm

Ar8031 Firmware by Qualcomm

Ar8035 Firmware by Qualcomm

Csra6620 Firmware by Qualcomm

Csra6640 Firmware by Qualcomm

Csrb31024 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6800 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Flight Rb5 5g Platform Firmware by Qualcomm

Home Hub 100 Platform Firmware by Qualcomm

Immersive Home 214 Platform Firmware by Qualcomm

Immersive Home 216 Platform Firmware by Qualcomm

Immersive Home 316 Platform Firmware by Qualcomm

Immersive Home 318 Platform Firmware by Qualcomm

Ipq5010 Firmware by Qualcomm

Ipq5028 Firmware by Qualcomm

Mdm9628 Firmware by Qualcomm

Mdm9640 Firmware by Qualcomm

Msm8996au Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qamsrv1h Firmware by Qualcomm

Qamsrv1m Firmware by Qualcomm

Qca1062 Firmware by Qualcomm

Qca1064 Firmware by Qualcomm

Qca2066 Firmware by Qualcomm

Qca4024 Firmware by Qualcomm

Qca6174a Firmware by Qualcomm

Qca6175a Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6420 Firmware by Qualcomm

Qca6430 Firmware by Qualcomm

Qca6554a Firmware by Qualcomm

Qca6564a Firmware by Qualcomm

Qca6564au Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584 Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6678aq Firmware by Qualcomm

Qca6688aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qcc2073 Firmware by Qualcomm

Qcc2076 Firmware by Qualcomm

Qcc5161 Firmware by Qualcomm

Qcc710 Firmware by Qualcomm

Qcc711 Firmware by Qualcomm

Qcc7225 Firmware by Qualcomm

Qcc7226 Firmware by Qualcomm

Qcc7228 Firmware by Qualcomm

Qcm6125 Firmware by Qualcomm

Qcn6023 Firmware by Qualcomm

Qcn6024 Firmware by Qualcomm

Qcn6100 Firmware by Qualcomm

Qcn6102 Firmware by Qualcomm

Qcn6112 Firmware by Qualcomm

Qcn6122 Firmware by Qualcomm

Qcn6132 Firmware by Qualcomm

Qcn6224 Firmware by Qualcomm

Qcn6274 Firmware by Qualcomm

Qcn7605 Firmware by Qualcomm

Qcn7606 Firmware by Qualcomm

Qcn9000 Firmware by Qualcomm