6.1

CVE-2025-47362

Buffer Over-read in Automotive Software platform based on QNX

Information disclosure while processing message from client with invalid payload.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Msm8996au Firmware Version -
   Qualcomm ≫ Msm8996au Version -
Qualcomm ≫ Qam8255p Firmware Version -
   Qualcomm ≫ Qam8255p Version -
Qualcomm ≫ Qam8295p Firmware Version -
   Qualcomm ≫ Qam8295p Version -
Qualcomm ≫ Qam8620p Firmware Version -
   Qualcomm ≫ Qam8620p Version -
Qualcomm ≫ Qam8650p Firmware Version -
   Qualcomm ≫ Qam8650p Version -
Qualcomm ≫ Qam8775p Firmware Version -
   Qualcomm ≫ Qam8775p Version -
Qualcomm ≫ Qamsrv1h Firmware Version -
   Qualcomm ≫ Qamsrv1h Version -
Qualcomm ≫ Qamsrv1m Firmware Version -
   Qualcomm ≫ Qamsrv1m Version -
Qualcomm ≫ Qca6574au Firmware Version -
   Qualcomm ≫ Qca6574au Version -
Qualcomm ≫ Qca6584au Firmware Version -
   Qualcomm ≫ Qca6584au Version -
Qualcomm ≫ Qca6595 Firmware Version -
   Qualcomm ≫ Qca6595 Version -
Qualcomm ≫ Qca6595au Firmware Version -
   Qualcomm ≫ Qca6595au Version -
Qualcomm ≫ Qca6688aq Firmware Version -
   Qualcomm ≫ Qca6688aq Version -
Qualcomm ≫ Qca6696 Firmware Version -
   Qualcomm ≫ Qca6696 Version -
Qualcomm ≫ Qca6698aq Firmware Version -
   Qualcomm ≫ Qca6698aq Version -
Qualcomm ≫ Qca6797aq Firmware Version -
   Qualcomm ≫ Qca6797aq Version -
Qualcomm ≫ Qca8695au Firmware Version -
   Qualcomm ≫ Qca8695au Version -
Qualcomm ≫ Sa6145p Firmware Version -
   Qualcomm ≫ Sa6145p Version -
Qualcomm ≫ Sa6150p Firmware Version -
   Qualcomm ≫ Sa6150p Version -
Qualcomm ≫ Sa6155p Firmware Version -
   Qualcomm ≫ Sa6155p Version -
Qualcomm ≫ Sa7255p Firmware Version -
   Qualcomm ≫ Sa7255p Version -
Qualcomm ≫ Sa7775p Firmware Version -
   Qualcomm ≫ Sa7775p Version -
Qualcomm ≫ Sa8145p Firmware Version -
   Qualcomm ≫ Sa8145p Version -
Qualcomm ≫ Sa8150p Firmware Version -
   Qualcomm ≫ Sa8150p Version -
Qualcomm ≫ Sa8155p Firmware Version -
   Qualcomm ≫ Sa8155p Version -
Qualcomm ≫ Sa8195p Firmware Version -
   Qualcomm ≫ Sa8195p Version -
Qualcomm ≫ Sa8255p Firmware Version -
   Qualcomm ≫ Sa8255p Version -
Qualcomm ≫ Sa8295p Firmware Version -
   Qualcomm ≫ Sa8295p Version -
Qualcomm ≫ Sa8540p Firmware Version -
   Qualcomm ≫ Sa8540p Version -
Qualcomm ≫ Sa8620p Firmware Version -
   Qualcomm ≫ Sa8620p Version -
Qualcomm ≫ Sa8650p Firmware Version -
   Qualcomm ≫ Sa8650p Version -
Qualcomm ≫ Sa8770p Firmware Version -
   Qualcomm ≫ Sa8770p Version -
Qualcomm ≫ Sa8775p Firmware Version -
   Qualcomm ≫ Sa8775p Version -
Qualcomm ≫ Sa9000p Firmware Version -
   Qualcomm ≫ Sa9000p Version -
Qualcomm ≫ Srv1h Firmware Version -
   Qualcomm ≫ Srv1h Version -
Qualcomm ≫ Srv1l Firmware Version -
   Qualcomm ≫ Srv1l Version -
Qualcomm ≫ Srv1m Firmware Version -
   Qualcomm ≫ Srv1m Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.08% 0.002
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Qualcomm 6.1 1.8 4.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
CWE-126 Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
Vendor Advisory