CVE-2025-47382

Q: What is the severity of CVE-2025-47382?

CVE-2025-47382 has a CVSS score of 7.8 (HIGH). This vulnerability allows memory corruption in the boot loader when loading invalid firmware, potentially enabling attackers to execute arbitrary code or cause denial of service. It affects devices using Qualcomm chipsets with vulnerable boot loaders.

7.8 HIGH

📋 TL;DR

This vulnerability allows memory corruption in the boot loader when loading invalid firmware, potentially enabling attackers to execute arbitrary code or cause denial of service. It affects devices using Qualcomm chipsets with vulnerable boot loaders.

💻 Affected Systems

Products:

Qualcomm-based mobile devices, IoT devices, embedded systems

Versions: Specific versions not detailed in reference; check Qualcomm advisory for affected chipset models

Operating Systems: Android, Linux-based embedded systems

Default Config Vulnerable: ⚠️ Yes

Notes: Devices with vulnerable Qualcomm boot loaders; exact models depend on chipset implementation.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete device compromise with persistent root access, allowing attackers to install backdoors, steal sensitive data, or brick the device.

🟠

Likely Case

Device instability, crashes, or denial of service requiring physical reset or reflashing of firmware.

🟢

If Mitigated

Limited impact with proper firmware validation and secure boot enabled, potentially preventing exploitation.

🌐 Internet-Facing: LOW with brief explanation

🏢 Internal Only: MEDIUM with brief explanation

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: HIGH

Exploitation requires physical access or ability to modify firmware during boot process.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Refer to Qualcomm security bulletin for specific chipset firmware updates

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html

Restart Required: Yes

Instructions:

1. Check Qualcomm advisory for affected chipset models. 2. Obtain updated boot loader firmware from device manufacturer. 3. Apply firmware update following manufacturer instructions. 4. Reboot device.

🔧 Temporary Workarounds

Enable Secure Boot

all

Ensure secure boot is enabled to verify firmware integrity during boot process

Restrict Physical Access

all

Limit physical access to devices to prevent firmware manipulation

🧯 If You Can't Patch

Isolate vulnerable devices on segmented networks to limit potential lateral movement
Implement strict physical security controls to prevent unauthorized firmware updates

🔍 How to Verify

Check if Vulnerable:

Check device boot loader version against Qualcomm advisory; consult manufacturer for vulnerability status

Check Version:

Device-specific; typically requires manufacturer diagnostic tools or boot loader interface

Verify Fix Applied:

Verify boot loader firmware version has been updated to patched version from manufacturer

📡 Detection & Monitoring

Log Indicators:

Boot loader error messages, unexpected firmware load attempts, system crashes during boot

Network Indicators:

Unusual network traffic from device shortly after boot, unexpected firmware update requests

SIEM Query:

Example: 'boot AND (error OR crash OR firmware)' filtered by device type

📊 Metadata

CVE ID: CVE-2025-47382

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-863

EPSS Score: 0.01% exploit probability (2.1th percentile)

Published: December 18, 2025

Last Updated: January 28, 2026

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html Patch,Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8620p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qamsrv1h Firmware by Qualcomm

Qamsrv1m Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6688aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8695au Firmware by Qualcomm

Qca9367 Firmware by Qualcomm

Qca9377 Firmware by Qualcomm

Qcm6690 Firmware by Qualcomm

Qcs610 Firmware by Qualcomm

Qcs6690 Firmware by Qualcomm

Qmp1000 Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa7255p Firmware by Qualcomm

Sa7775p Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sa8620p Firmware by Qualcomm

Sa8650p Firmware by Qualcomm

Sa8770p Firmware by Qualcomm

Sa8775p Firmware by Qualcomm

Sa9000p Firmware by Qualcomm

Sg6150 Firmware by Qualcomm

Sg6150p Firmware by Qualcomm

Sm4635 Firmware by Qualcomm

Sm6650 Firmware by Qualcomm

Sm6650p Firmware by Qualcomm

Sm7635 Firmware by Qualcomm

Sm7635p Firmware by Qualcomm

Sm7675 Firmware by Qualcomm

Sm7675p Firmware by Qualcomm

Sm8635 Firmware by Qualcomm

Sm8635p Firmware by Qualcomm

Sm8650q Firmware by Qualcomm

Sm8735 Firmware by Qualcomm

Sm8750 Firmware by Qualcomm

Sm8750p Firmware by Qualcomm

Sm8850 Firmware by Qualcomm

Sm8850p Firmware by Qualcomm

Snapdragon 4 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 480 5g Mobile Platform Firmware by Qualcomm

Snapdragon 480\+ 5g Mobile Platform \(sm4350 Ac\) Firmware by Qualcomm

Snapdragon 695 5g Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 3 Mobile Platform Firmware by Qualcomm

Snapdragon Ar1 Gen 1 Platform \"luna1\" Firmware by Qualcomm

Snapdragon Ar1 Gen 1 Platform Firmware by Qualcomm

Snapdragon W5\+ Gen 1 Wearable Platform Firmware by Qualcomm

Srv1h Firmware by Qualcomm

Srv1l Firmware by Qualcomm

Srv1m Firmware by Qualcomm

Sw5100 Firmware by Qualcomm

Sw5100p Firmware by Qualcomm

Sxr2330p Firmware by Qualcomm

Sxr2350p Firmware by Qualcomm

Video Collaboration Vc1 Platform Firmware by Qualcomm

Video Collaboration Vc3 Platform Firmware by Qualcomm

Wcd9370 Firmware by Qualcomm

Wcd9375 Firmware by Qualcomm

Wcd9378 Firmware by Qualcomm

Wcd9380 Firmware by Qualcomm