CVE-2025-47319

Q: What is the severity of CVE-2025-47319?

CVE-2025-47319 has a CVSS score of 6.7 (MEDIUM). This vulnerability exposes internal Trusted Application (TA) communication APIs to the High-Level Operating System (HLOS), allowing unauthorized access to sensitive information exchanged between TAs. It affects Qualcomm chipsets in mobile devices and IoT systems where these APIs are improperly exposed.

6.7 MEDIUM

📋 TL;DR

This vulnerability exposes internal Trusted Application (TA) communication APIs to the High-Level Operating System (HLOS), allowing unauthorized access to sensitive information exchanged between TAs. It affects Qualcomm chipsets in mobile devices and IoT systems where these APIs are improperly exposed.

💻 Affected Systems

Products:

Qualcomm chipsets with TrustZone technology

Versions: Specific versions not publicly detailed in bulletin

Operating Systems: Android, Linux-based IoT systems

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices using Qualcomm's Trusted Execution Environment (TEE) implementation. Requires specific chipset models and firmware versions.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete compromise of secure enclave communications, leading to exposure of cryptographic keys, biometric data, payment credentials, and other sensitive information protected by TrustZone.

🟠

Likely Case

Information disclosure of sensitive data from one or more TAs, potentially including authentication tokens, device identifiers, or protected app data.

🟢

If Mitigated

Limited information exposure with proper access controls and monitoring, potentially revealing only non-critical metadata.

🌐 Internet-Facing: MEDIUM

🏢 Internal Only: HIGH

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires local access and knowledge of TA communication protocols. No public exploit code available as of advisory publication.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Refer to December 2025 Qualcomm security bulletin for specific chipset firmware updates

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html

Restart Required: Yes

Instructions:

1. Check device manufacturer for firmware updates. 2. Apply Qualcomm-provided patches through OEM updates. 3. Reboot device after update installation.

🔧 Temporary Workarounds

Restrict TA communication permissions

all

Configure TrustZone policies to limit which HLOS components can access TA communication APIs

Disable unnecessary TAs

all

Remove or disable Trusted Applications that don't require HLOS interaction

🧯 If You Can't Patch

Implement strict access controls on devices with vulnerable chipsets
Monitor for unusual TA communication patterns and implement application whitelisting

🔍 How to Verify

Check if Vulnerable:

Check device firmware version against Qualcomm security bulletin. Use 'getprop ro.bootloader' on Android devices to check bootloader version.

Check Version:

adb shell getprop ro.bootloader (for Android devices)

Verify Fix Applied:

Verify firmware version has been updated to patched version specified in Qualcomm advisory. Check that TA communication APIs are no longer exposed to HLOS.

📡 Detection & Monitoring

Log Indicators:

Unusual TrustZone API calls from HLOS processes
TA communication errors or access violations

Network Indicators:

Not applicable - local vulnerability only

SIEM Query:

process:trustzone_api_access AND result:failure OR process:tee_communication AND source:untrusted_zone

📊 Metadata

CVE ID: CVE-2025-47319

CVSS v3 Score: 6.7 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N

CWE: CWE-497

EPSS Score: 0.01% exploit probability (1.6th percentile)

Published: December 18, 2025

Last Updated: January 28, 2026

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Ar8035 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8620p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qamsrv1h Firmware by Qualcomm

Qamsrv1m Firmware by Qualcomm

Qca6174a Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6678aq Firmware by Qualcomm

Qca6688aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qcc710 Firmware by Qualcomm

Qcm5430 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcn6224 Firmware by Qualcomm

Qcn6274 Firmware by Qualcomm

Qcs5430 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qdu1010 Firmware by Qualcomm

Qdx1010 Firmware by Qualcomm

Qdx1011 Firmware by Qualcomm

Qep8111 Firmware by Qualcomm

Qfw7114 Firmware by Qualcomm

Qfw7124 Firmware by Qualcomm

Qmp1000 Firmware by Qualcomm

Sa6145p Firmware by Qualcomm

Sa6150p Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa7255p Firmware by Qualcomm

Sa7775p Firmware by Qualcomm

Sa8145p Firmware by Qualcomm

Sa8150p Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sa8540p Firmware by Qualcomm

Sa8620p Firmware by Qualcomm

Sa8650p Firmware by Qualcomm

Sa8770p Firmware by Qualcomm

Sa8775p Firmware by Qualcomm

Sa9000p Firmware by Qualcomm

Sc8380xp Firmware by Qualcomm

Sm4635 Firmware by Qualcomm

Sm6475 Firmware by Qualcomm

Sm6650 Firmware by Qualcomm

Sm6650p Firmware by Qualcomm

Sm7435 Firmware by Qualcomm

Sm7635 Firmware by Qualcomm

Sm7635p Firmware by Qualcomm

Sm7675 Firmware by Qualcomm

Sm7675p Firmware by Qualcomm

Sm8635 Firmware by Qualcomm

Sm8635p Firmware by Qualcomm

Sm8650q Firmware by Qualcomm

Sm8735 Firmware by Qualcomm

Sm8750 Firmware by Qualcomm

Sm8750p Firmware by Qualcomm

Snapdragon 4 Gen 2 Mobile Platform Firmware by Qualcomm

Snapdragon 6 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 3 Mobile Platform Firmware by Qualcomm

Snapdragon Ar1 Gen 1 Platform \"luna1\" Firmware by Qualcomm