CVE-2025-47385

Q: What is the severity of CVE-2025-47385?

CVE-2025-47385 has a CVSS score of 7.8 (HIGH). This vulnerability allows memory corruption when accessing the trusted execution environment (TEE) without proper privilege checks. Attackers could potentially execute arbitrary code or cause denial of service. This affects systems using Qualcomm chipsets with vulnerable TEE implementations.

7.8 HIGH

📋 TL;DR

This vulnerability allows memory corruption when accessing the trusted execution environment (TEE) without proper privilege checks. Attackers could potentially execute arbitrary code or cause denial of service. This affects systems using Qualcomm chipsets with vulnerable TEE implementations.

💻 Affected Systems

Products:

Qualcomm chipsets with TEE implementations

Versions: Specific versions not detailed in reference; likely affects multiple chipset generations

Operating Systems: Android, Linux-based systems using Qualcomm chips

Default Config Vulnerable: ⚠️ Yes

Notes: Requires physical access or local code execution to exploit; affects devices with vulnerable Qualcomm TEE firmware.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete system compromise allowing arbitrary code execution in TEE context, potentially bypassing hardware security features and accessing sensitive data.

🟠

Likely Case

Denial of service through system crashes or instability, with potential for limited information disclosure from TEE memory.

🟢

If Mitigated

Minimal impact if proper privilege separation and memory protection are enforced at hardware/firmware level.

🌐 Internet-Facing: MEDIUM

🏢 Internal Only: HIGH

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: HIGH

Exploitation requires local access and deep knowledge of TEE architecture; no public exploits known.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Refer to Qualcomm March 2026 security bulletin for specific firmware versions

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bulletin.html

Restart Required: Yes

Instructions:

1. Check Qualcomm advisory for affected chipset models. 2. Obtain updated firmware from device manufacturer. 3. Apply firmware update following manufacturer instructions. 4. Reboot device to activate new firmware.

🔧 Temporary Workarounds

Restrict TEE Access

linux

Limit applications with TEE access permissions to trusted sources only

Review and restrict SELinux/AppArmor policies for TEE access

Disable Unnecessary TEE Services

all

Disable TEE services not required for device functionality

Check manufacturer documentation for TEE service management

🧯 If You Can't Patch

Implement strict application whitelisting to prevent untrusted code execution
Use hardware-based security controls to isolate TEE from untrusted processes

🔍 How to Verify

Check if Vulnerable:

Check chipset version and firmware against Qualcomm advisory; use 'getprop ro.bootloader' on Android devices

Check Version:

adb shell getprop ro.bootloader (Android) or dmidecode (Linux systems)

Verify Fix Applied:

Verify firmware version matches patched version in Qualcomm bulletin; check TEE service logs for stability

📡 Detection & Monitoring

Log Indicators:

TEE service crashes
Kernel panic messages related to secure memory
Unexpected TEE access attempts

Network Indicators:

None - local vulnerability only

SIEM Query:

source="kernel" AND ("TEE" OR "trustzone") AND ("panic" OR "crash" OR "corruption")

📊 Metadata

CVE ID: CVE-2025-47385

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-1262

Published: March 2, 2026

Last Updated: March 5, 2026

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bulletin.html Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

G2 Gen 1 Firmware by Qualcomm

Lemans Au Lgit Firmware by Qualcomm

Lemansau Firmware by Qualcomm

Milos Firmware by Qualcomm

Netrani Firmware by Qualcomm

Orne Firmware by Qualcomm

Palawan25 Firmware by Qualcomm

Pandeiro Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qamsrv1h Firmware by Qualcomm

Qamsrv1m Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6688aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8695au Firmware by Qualcomm

Qca9367 Firmware by Qualcomm

Qca9377 Firmware by Qualcomm

Qln1083bd Firmware by Qualcomm

Qln1086bd Firmware by Qualcomm

Qmp1000 Firmware by Qualcomm

Qpa1083bd Firmware by Qualcomm

Qpa1086bd Firmware by Qualcomm

Qxm1083 Firmware by Qualcomm

Qxm1086 Firmware by Qualcomm

Qxm1093 Firmware by Qualcomm

Qxm1094 Firmware by Qualcomm

Qxm1095 Firmware by Qualcomm

Qxm1096 Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa7255p Firmware by Qualcomm

Sa7775p Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sa8620p Firmware by Qualcomm

Sa8770p Firmware by Qualcomm

Sa9000p Firmware by Qualcomm

Sar1165p Firmware by Qualcomm

Sar1250p Firmware by Qualcomm

Sar2230p Firmware by Qualcomm

Sm7435 Firmware by Qualcomm

Sm8750p Firmware by Qualcomm

Snapdragon 4 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 4 Gen 2 Mobile Platform Firmware by Qualcomm

Snapdragon 480 5g Mobile Platform Firmware by Qualcomm

Snapdragon 480 5g Mobile Platform Firmware by Qualcomm

Snapdragon 6 Gen 1 Mobile Platform Firmware by Qualcomm

Snapdragon 6 Gen 3 Mobile Platform Firmware by Qualcomm

Snapdragon 6 Gen 4 Mobile Platform Firmware by Qualcomm

Snapdragon 695 5g Mobile Platform Firmware by Qualcomm

Snapdragon 7s Gen 3 Mobile Platform Firmware by Qualcomm

Snapdragon 8 Elite Firmware by Qualcomm

Snapdragon Ar1 Gen 1 Platform Firmware by Qualcomm

Snapdragon W5\+ Gen 1 Wearable Platform Firmware by Qualcomm

Srv1h Firmware by Qualcomm

Srv1m Firmware by Qualcomm

Sw5100 Firmware by Qualcomm

Sw5100p Firmware by Qualcomm

Sxr2330p Firmware by Qualcomm

Sxr2350p Firmware by Qualcomm

Wcd9370 Firmware by Qualcomm

Wcd9375 Firmware by Qualcomm

Wcd9378 Firmware by Qualcomm

Wcd9380 Firmware by Qualcomm

Wcd9385 Firmware by Qualcomm