CVE-2025-47351

HIGH

Published Oct 9, 2025 Modified Nov 5, 2025 CWE-190

Description

Memory corruption while processing user buffers.

Is your site exposed to CVE-2025-47351?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-190 Integer Overflow

Affected Products

Vendor	Product	Versions
qualcomm	fastconnect_6200_firmware	All
qualcomm	fastconnect_6200	All
qualcomm	fastconnect_6700_firmware	All
qualcomm	fastconnect_6700	All
qualcomm	fastconnect_6900_firmware	All
qualcomm	fastconnect_6900	All
qualcomm	fastconnect_7800_firmware	All
qualcomm	fastconnect_7800	All
qualcomm	sg6150_firmware	All
qualcomm	sg6150	All
qualcomm	sg6150p_firmware	All
qualcomm	sg6150p	All
qualcomm	sm8750_firmware	All
qualcomm	sm8750	All
qualcomm	sm8750p_firmware	All
qualcomm	sm8750p	All
qualcomm	sm8850_firmware	All
qualcomm	sm8850	All
qualcomm	sm8850p_firmware	All
qualcomm	sm8850p	All
qualcomm	wcd9370_firmware	All
qualcomm	wcd9370	All
qualcomm	wcd9375_firmware	All
qualcomm	wcd9375	All
qualcomm	wcd9385_firmware	All
qualcomm	wcd9385	All
qualcomm	wcd9395_firmware	All
qualcomm	wcd9395	All
qualcomm	wcn3950_firmware	All
qualcomm	wcn3950	All
qualcomm	wcn3988_firmware	All
qualcomm	wcn3988	All
qualcomm	wcn7860_firmware	All
qualcomm	wcn7860	All
qualcomm	wcn7861_firmware	All
qualcomm	wcn7861	All
qualcomm	wcn7880_firmware	All
qualcomm	wcn7880	All
qualcomm	wcn7881_firmware	All
qualcomm	wcn7881	All
qualcomm	wsa8810_firmware	All
qualcomm	wsa8810	All
qualcomm	wsa8815_firmware	All
qualcomm	wsa8815	All
qualcomm	wsa8830_firmware	All
qualcomm	wsa8830	All
qualcomm	wsa8832_firmware	All
qualcomm	wsa8832	All
qualcomm	wsa8835_firmware	All
qualcomm	wsa8835	All
qualcomm	wsa8840_firmware	All
qualcomm	wsa8840	All
qualcomm	wsa8845_firmware	All
qualcomm	wsa8845	All
qualcomm	wsa8845h_firmware	All
qualcomm	wsa8845h	All

References

Advisories & Patches

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html

Frequently Asked Questions

What is CVE-2025-47351? +

Memory corruption while processing user buffers. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2025-47351? +

CVE-2025-47351 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2025-47351? +

CVE-2025-47351 affects products from qualcomm, specifically: fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, sg6150, sg6150_firmware, sg6150p, sg6150p_firmware, sm8750, sm8750_firmware, sm8750p, sm8750p_firmware, sm8850, sm8850_firmware, sm8850p, sm8850p_firmware, wcd9370, wcd9370_firmware, wcd9375, wcd9375_firmware, wcd9385, wcd9385_firmware, wcd9395, wcd9395_firmware, wcn3950, wcn3950_firmware, wcn3988, wcn3988_firmware, wcn7860, wcn7860_firmware, wcn7861, wcn7861_firmware, wcn7880, wcn7880_firmware, wcn7881, wcn7881_firmware, wsa8810, wsa8810_firmware, wsa8815, wsa8815_firmware, wsa8830, wsa8830_firmware, wsa8832, wsa8832_firmware, wsa8835, wsa8835_firmware, wsa8840, wsa8840_firmware, wsa8845, wsa8845_firmware, wsa8845h, wsa8845h_firmware. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-47351? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-2574

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code.

CVE-2025-46333

z2d is a pure Zig 2D graphics library. Versions of z2d after `0.5.1` and up to and including `0.6.0`, when …

CVE-2024-30212

If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of …

CVE-2025-52935

Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly (src/redis/lua/struct modules). This vulnerability is associated with program files lua_struct.C. This issue …

CVE-2025-7709

An integer overflow exists in the FTS5 https://sqlite.org/fts5.html extension. It occurs when the size of an array of tombstone pointers …

CVE-2025-34297

KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kiss_fft_alloc() in kiss_fft.c on platforms where size_t …