CVE-2025-47362 - Vulnerability Details - OpenCVE

Information disclosure while processing message from client with invalid payload.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Qnx	Qnx
Qualcomm	Snapdragon

No data.

No data.

References

Link	Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html

History

Tue, 04 Nov 2025 16:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Qnx Qnx qnx Qualcomm Qualcomm snapdragon
Vendors & Products		Qnx Qnx qnx Qualcomm Qualcomm snapdragon

Tue, 04 Nov 2025 03:45:00 +0000

Type	Values Removed	Values Added
Description		Information disclosure while processing message from client with invalid payload.
Title		Buffer Over-read in Automotive Software platform based on QNX
Weaknesses		CWE-126
References		https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
Metrics		cvssV3_1 `{'score': 6.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L'}`

MITRE

Status: PUBLISHED

Assigner: qualcomm

Published: 2025-11-04T03:19:21.202Z

Updated: 2025-11-04T19:18:27.877Z

Reserved: 2025-05-06T08:33:16.264Z

Link: CVE-2025-47362

Vulnrichment

No data.

NVD

Status : Awaiting Analysis

Published: 2025-11-04T04:15:39.077

Modified: 2025-11-04T15:40:45.533

Link: CVE-2025-47362

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-47362", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2025-05-06T08:33:16.264Z", "datePublished": "2025-11-04T03:19:21.202Z", "dateUpdated": "2025-11-04T19:18:27.877Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Auto"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "MSM8996AU"}, {"status": "affected", "version": "QAM8255P"}, {"status": "affected", "version": "QAM8295P"}, {"status": "affected", "version": "QAM8620P"}, {"status": "affected", "version": "QAM8650P"}, {"status": "affected", "version": "QAM8775P"}, {"status": "affected", "version": "QAMSRV1H"}, {"status": "affected", "version": "QAMSRV1M"}, {"status": "affected", "version": "QCA6574AU"}, {"status": "affected", "version": "QCA6584AU"}, {"status": "affected", "version": "QCA6595"}, {"status": "affected", "version": "QCA6595AU"}, {"status": "affected", "version": "QCA6688AQ"}, {"status": "affected", "version": "QCA6696"}, {"status": "affected", "version": "QCA6698AQ"}, {"status": "affected", "version": "QCA6797AQ"}, {"status": "affected", "version": "QCA8695AU"}, {"status": "affected", "version": "SA6145P"}, {"status": "affected", "version": "SA6150P"}, {"status": "affected", "version": "SA6155P"}, {"status": "affected", "version": "SA7255P"}, {"status": "affected", "version": "SA7775P"}, {"status": "affected", "version": "SA8145P"}, {"status": "affected", "version": "SA8150P"}, {"status": "affected", "version": "SA8155P"}, {"status": "affected", "version": "SA8195P"}, {"status": "affected", "version": "SA8255P"}, {"status": "affected", "version": "SA8295P"}, {"status": "affected", "version": "SA8540P"}, {"status": "affected", "version": "SA8620P"}, {"status": "affected", "version": "SA8650P"}, {"status": "affected", "version": "SA8770P"}, {"status": "affected", "version": "SA8775P"}, {"status": "affected", "version": "SA9000P"}, {"status": "affected", "version": "Snapdragon 820 Automotive Platform"}, {"status": "affected", "version": "SRV1H"}, {"status": "affected", "version": "SRV1L"}, {"status": "affected", "version": "SRV1M"}]}], "descriptions": [{"lang": "en", "value": "Information disclosure while processing message from client with invalid payload."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-126", "description": "CWE-126 Buffer Over-read", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2025-11-04T03:19:21.202Z"}, "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html"}], "title": "Buffer Over-read in Automotive Software platform based on QNX"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-04T19:18:18.659725Z", "id": "CVE-2025-47362", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-04T19:18:27.877Z"}}]}}