الثغرات ›

CVE-2025-47389

مرتفع

CWE-120 — نوع الضعف

                    نُشر: Apr 6, 2026                      ·  آخر تحديث: Apr 13, 2026                      ·  المصدر: NVD                

CVSS v3

7.8

🔗 NVD الرسمي

📄 الوصف (الإنجليزية)

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

🤖

في طابور التحليل الذكي

سيتم تحليل هذا CVE تلقائياً في المهام المجدولة.

🔗 المراجع والمصادر 1

🔗

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin....

product-security@qualcomm.com

Vendor Advisory

📦 المنتجات المتأثرة 50 منتج

qualcomm:ar8035_firmware:-

qualcomm:cologne_firmware:-

qualcomm:csra6620_firmware:-

qualcomm:csra6640_firmware:-

qualcomm:fastconnect_6200_firmware:-

qualcomm:snapdragon_x35_5g_modem-rf_system_firmware:-

qualcomm:snapdragon_x53_5g_modem-rf_system_firmware:-

qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-

qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-

qualcomm:snapdragon_x75_5g_modem-rf_system_firmware:-

qualcomm:snapdragon_xr2\+_gen_1_platform_firmware:-

qualcomm:snapdragon_xr2_5g_platform_firmware:-

qualcomm:srv1h_firmware:-

qualcomm:srv1l_firmware:-

qualcomm:srv1m_firmware:-

qualcomm:sw6100_firmware:-

qualcomm:sw6100p_firmware:-

qualcomm:sxr2330p_firmware:-

qualcomm:sxr2350p_firmware:-

qualcomm:themisto_firmware:-

qualcomm:video_collaboration_vc1_platform_firmware:-

qualcomm:video_collaboration_vc3_platform_firmware:-

qualcomm:wcd9335_firmware:-

qualcomm:wcd9340_firmware:-

qualcomm:wcd9370_firmware:-

qualcomm:wcd9375_firmware:-

qualcomm:wcd9378_firmware:-

qualcomm:wcd9378c_firmware:-

qualcomm:wcd9380_firmware:-

qualcomm:wcd9385_firmware:-

qualcomm:wcd9390_firmware:-

qualcomm:wcd9395_firmware:-

qualcomm:wcn3910_firmware:-

qualcomm:wcn3950_firmware:-

qualcomm:wcn3980_firmware:-

qualcomm:wcn3988_firmware:-

qualcomm:wcn6450_firmware:-

qualcomm:wcn6650_firmware:-

qualcomm:wcn6755_firmware:-

qualcomm:wcn7860_firmware:-

qualcomm:wcn7861_firmware:-

qualcomm:wcn7880_firmware:-

qualcomm:wcn7881_firmware:-

qualcomm:wsa8810_firmware:-

qualcomm:wsa8815_firmware:-

qualcomm:fastconnect_6700_firmware:-

qualcomm:fastconnect_6800_firmware:-

qualcomm:fastconnect_6900_firmware:-

qualcomm:fastconnect_7800_firmware:-

qualcomm:fwa_gen_3_ultra_firmware:-

📊 CVSS Score

7.8

/ 10.0 — مرتفع

📊 CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorL — Low / Local

Attack ComplexityL — Low / Local

Privileges RequiredL — Low / Local

User InteractionN — None / Network

ScopeU — Unchanged

ConfidentialityH — High

IntegrityH — High

AvailabilityH — High

📋 حقائق سريعة

الخطورة مرتفع

CVSS Score7.8

CWECWE-120

EPSS0.01%

اختراق متاح لا

تصحيح متاح ✗ لا

تاريخ النشر 2026-04-06

المصدر nvd

المشاهدات 2

🏷️ الوسوم

CWE-120

🏢 توجيهات البائع

🔗 https://docs.qualcomm.com/product/publicresources/se...

⚡ إجراءات

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

CVE-2025-47389

في طابور التحليل الذكي

عرّفنا بنفسك

تسجيل الدخول مطلوب