Evil-DB LogoEvil-DB
← All CVEs

CVE-2025-47372

critical · 9

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.

9
CVSS
0.1%
EPSS (exploit prob.)
2nd
EPSS percentile
2025-12-18
Published

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Weaknesses

CWE-120CWE-787

Affected products

VendorProductAffected versions
qualcommqam8255p_firmwareall versions
qualcommqam8255pall versions
qualcommqam8620p_firmwareall versions
qualcommqam8620pall versions
qualcommqam8650p_firmwareall versions
qualcommqam8650pall versions
qualcommqam8775p_firmwareall versions
qualcommqam8775pall versions
qualcommqamsrv1h_firmwareall versions
qualcommqamsrv1hall versions
qualcommqamsrv1m_firmwareall versions
qualcommqamsrv1mall versions
qualcommqca6595_firmwareall versions
qualcommqca6595all versions
qualcommqca6595au_firmwareall versions
qualcommqca6595auall versions
qualcommqca6678aq_firmwareall versions
qualcommqca6678aqall versions
qualcommqca6696_firmwareall versions
qualcommqca6696all versions
qualcommqca6698aq_firmwareall versions
qualcommqca6698aqall versions
qualcommqca6797aq_firmwareall versions
qualcommqca6797aqall versions
qualcommsa7255p_firmwareall versions
qualcommsa7255pall versions
qualcommsa7775p_firmwareall versions
qualcommsa7775pall versions
qualcommsa8255p_firmwareall versions
qualcommsa8255pall versions
qualcommsa8620p_firmwareall versions
qualcommsa8620pall versions
qualcommsa8650p_firmwareall versions
qualcommsa8650pall versions
qualcommsa8770p_firmwareall versions
qualcommsa8770pall versions
qualcommsa8775p_firmwareall versions
qualcommsa8775pall versions
qualcommsa9000p_firmwareall versions
qualcommsa9000pall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-47372