CVE-2025-47366

Q: What is the severity of CVE-2025-47366?

CVE-2025-47366 has a CVSS score of 7.1 (HIGH). A cryptographic vulnerability in Qualcomm's Trusted Zone when triggered by the High-Level Operating System (HLOS) providing incorrect input. This allows potential cryptographic bypass or manipulation affecting devices using Qualcomm chipsets with outdated firmware.

7.1 HIGH

📋 TL;DR

A cryptographic vulnerability in Qualcomm's Trusted Zone when triggered by the High-Level Operating System (HLOS) providing incorrect input. This allows potential cryptographic bypass or manipulation affecting devices using Qualcomm chipsets with outdated firmware.

💻 Affected Systems

Products:

Qualcomm chipsets with Trusted Zone implementation

Versions: Specific versions not detailed in reference; affected versions would be those prior to February 2026 security updates

Operating Systems: Android and other mobile/embedded OS using Qualcomm chips

Default Config Vulnerable: ⚠️ Yes

Notes: Requires HLOS to provide malformed input to trigger the outdated code path in Trusted Zone

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete compromise of cryptographic protections, allowing decryption of sensitive data, authentication bypass, or execution of unauthorized code in secure contexts.

🟠

Likely Case

Partial cryptographic bypass enabling data leakage or integrity violations in secure applications.

🟢

If Mitigated

Limited impact with proper input validation and updated firmware preventing exploitation.

🌐 Internet-Facing: MEDIUM

🏢 Internal Only: HIGH

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: HIGH

Exploitation requires HLOS-level access and specific triggering conditions; no public exploits known as of reference date

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: February 2026 security updates from Qualcomm

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2026-bulletin.html

Restart Required: Yes

Instructions:

1. Check device manufacturer for firmware updates. 2. Apply Qualcomm February 2026 security patches. 3. Reboot device after update. 4. Verify patch installation through version checks.

🔧 Temporary Workarounds

Input Validation Enhancement

all

Implement strict input validation in HLOS to prevent malformed inputs from reaching Trusted Zone

Trusted Zone Access Restriction

all

Limit HLOS access to Trusted Zone functionality to essential operations only

🧯 If You Can't Patch

Implement network segmentation to isolate vulnerable devices
Monitor for unusual cryptographic operations or Trusted Zone access patterns

🔍 How to Verify

Check if Vulnerable:

Check device firmware version against Qualcomm's February 2026 security bulletin; devices with pre-February 2026 patches are likely vulnerable

Check Version:

Device-specific commands vary by manufacturer; typically 'getprop ro.build.version.security_patch' on Android devices

Verify Fix Applied:

Verify firmware version includes February 2026 security updates; check Qualcomm patch status through device settings or manufacturer tools

📡 Detection & Monitoring

Log Indicators:

Unusual Trusted Zone access patterns
Cryptographic operation failures
HLOS-to-TrustedZone communication errors

Network Indicators:

Anomalous secure communication patterns
Unexpected cryptographic protocol usage

SIEM Query:

Search for Trusted Zone access logs with malformed input patterns or cryptographic exceptions

📊 Metadata

CVE ID: CVE-2025-47366

CVSS v3 Score: 7.1 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE: CWE-749

EPSS Score: 0.01% exploit probability (0.2th percentile)

Published: February 2, 2026

Last Updated: February 11, 2026

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2026-bulletin.html Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Ar8035 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Flight Rb5 5g Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8620p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qamsrv1h Firmware by Qualcomm

Qamsrv1m Firmware by Qualcomm

Qca6174a Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6678aq Firmware by Qualcomm

Qca6688aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qca8695au Firmware by Qualcomm

Qcc710 Firmware by Qualcomm

Qcm4490 Firmware by Qualcomm

Qcm5430 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcn6224 Firmware by Qualcomm

Qcn6274 Firmware by Qualcomm

Qcn9011 Firmware by Qualcomm

Qcn9012 Firmware by Qualcomm

Qcs4490 Firmware by Qualcomm

Qcs5430 Firmware by Qualcomm

Qcs615 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qcs7230 Firmware by Qualcomm

Qcs9100 Firmware by Qualcomm

Qdu1010 Firmware by Qualcomm

Qdx1010 Firmware by Qualcomm

Qdx1011 Firmware by Qualcomm

Qep8111 Firmware by Qualcomm

Qfw7114 Firmware by Qualcomm

Qfw7124 Firmware by Qualcomm

Qmp1000 Firmware by Qualcomm

Qrb5165m Firmware by Qualcomm

Qrb5165n Firmware by Qualcomm

Qru1032 Firmware by Qualcomm

Qru1052 Firmware by Qualcomm

Qru1062 Firmware by Qualcomm

Robotics Rb5 Firmware by Qualcomm

Sa4150p Firmware by Qualcomm

Sa4155p Firmware by Qualcomm

Sa6145p Firmware by Qualcomm

Sa6150p Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa7255p Firmware by Qualcomm

Sa7775p Firmware by Qualcomm

Sa8145p Firmware by Qualcomm

Sa8150p Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sa8540p Firmware by Qualcomm

Sa8620p Firmware by Qualcomm

Sa8650p Firmware by Qualcomm

Sa8770p Firmware by Qualcomm

Sa8775p Firmware by Qualcomm

Sa9000p Firmware by Qualcomm

Sc8380xp Firmware by Qualcomm

Sd 8 Gen1 5g Firmware by Qualcomm