{"id":"CVE-2025-47392","title":"Memory corruption when decoding corrupted satellite data files with invalid signature offsets.","summary":"Memory corruption when decoding corrupted satellite data files with invalid signature offsets.","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-190"],"vendor":"qualcomm","product":"5g_fixed_wireless_access_platform_firmware","affected":["5g_fixed_wireless_access_platform_firmware","ar8035_firmware","csra6620_firmware","csra6640_firmware","fastconnect_6200_firmware","snapdragon_690_5g_mobile_platform_firmware","snapdragon_695_5g_mobile_platform_firmware","snapdragon_7_gen_1_mobile_platform_firmware","snapdragon_7+_gen_2_mobile_platform_firmware","snapdragon_778g_5g_mobile_platform_firmware","snapdragon_778g+_5g_mobile_platform_firmware","snapdragon_782g_mobile_platform_firmware","snapdragon_7c_compute_platform_firmware","snapdragon_7c_gen_2_compute_platform_firmware","snapdragon_7c+_gen_3_compute_firmware","snapdragon_7s_gen_3_mobile_platform_firmware","snapdragon_8_elite_firmware","snapdragon_8_gen_1_mobile_platform_firmware","snapdragon_8_gen_2_mobile_platform_firmware","snapdragon_8_gen_3_mobile_platform_firmware","snapdragon_8+_gen_1_mobile_platform_firmware","snapdragon_8+_gen_2_mobile_platform_firmware","snapdragon_865_5g_mobile_platform_firmware","snapdragon_865+_5g_mobile_platform_firmware","snapdragon_870_5g_mobile_platform_firmware","snapdragon_888_5g_mobile_platform_firmware","snapdragon_888+_5g_mobile_platform_firmware","snapdragon_auto_5g_modem-rf_firmware","snapdragon_auto_5g_modem-rf_gen_2_firmware","snapdragon_w5+_gen_1_wearable_platform_firmware","snapdragon_x32_5g_modem-rf_system_firmware","snapdragon_x35_5g_modem-rf_system_firmware","snapdragon_x53_5g_modem-rf_system_firmware","snapdragon_x55_5g_modem-rf_system_firmware","snapdragon_x65_5g_modem-rf_system_firmware","snapdragon_x70_modem-rf_system_firmware","snapdragon_x72_5g_modem-rf_system_firmware","snapdragon_x75_5g_modem-rf_system_firmware","snapdragon_x80_5g_modem-rf_system_firmware","sw5100_firmware","sw5100p_firmware","sw6100_firmware","sw6100p_firmware","themisto_firmware","wcd9335_firmware","fastconnect_6700_firmware","fastconnect_6800_firmware","fastconnect_6900_firmware","fastconnect_7800_firmware","fsm200_platform_firmware","fsm20055_firmware","fwa_gen_3_ultra_firmware","g1_gen_1_firmware","milos_firmware","netrani_firmware","orne_firmware","palawan25_firmware","qca6174a_firmware","qca6391_firmware","qca6574a_firmware","qca6574au_firmware","qca6584au_firmware","qca6595au_firmware","qca6678aq_firmware","qca6688aq_firmware","qca6696_firmware","qca6698aq_firmware","qca6698au_firmware","qca6797aq_firmware","qca8081_firmware","qca8337_firmware","qcc710_firmware","qcm2290_firmware","qcm4325_firmware","qcm4490_firmware","qcm5430_firmware","qcm6490_firmware","qcn6024_firmware","qcn6224_firmware","qcn6274_firmware","qcn9011_firmware","qcn9012_firmware","qcn9024_firmware","qcs2290_firmware","qcs4290_firmware","qcs4490_firmware","qcs8550_firmware","qep8111_firmware","qfw7114_firmware","qfw7124_firmware","qmp1000_firmware","video_collaboration_vc3_platform_firmware","robotics_rb2_platform_firmware","sd_8_gen1_5g_firmware","sd662_firmware","sdx57m_firmware","sdx61_firmware","sdx71m_firmware","sm6225p_firmware","sm6250_firmware"],"published":"2026-04-06","updated":"2026-09-30","sourceUpdated":"2026-09-30T22:10:00.273","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-47392","references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html","label":"product-security@qualcomm.com"}],"tags":["nvd"],"epss":0.00165,"epssPercentile":0.05172,"ingestedAt":"2026-09-30T22:27:27.747Z","slug":"CVE-2025-47392","body":"## Overview\n\nMemory corruption when decoding corrupted satellite data files with invalid signature offsets.\n\n## Affected\n\n- `5g_fixed_wireless_access_platform_firmware`\n- `ar8035_firmware`\n- `csra6620_firmware`\n- `csra6640_firmware`\n- `fastconnect_6200_firmware`\n- `snapdragon_690_5g_mobile_platform_firmware`\n- `snapdragon_695_5g_mobile_platform_firmware`\n- `snapdragon_7_gen_1_mobile_platform_firmware`\n- `snapdragon_7+_gen_2_mobile_platform_firmware`\n- `snapdragon_778g_5g_mobile_platform_firmware`\n- `snapdragon_778g+_5g_mobile_platform_firmware`\n- `snapdragon_782g_mobile_platform_firmware`\n- `snapdragon_7c_compute_platform_firmware`\n- `snapdragon_7c_gen_2_compute_platform_firmware`\n- `snapdragon_7c+_gen_3_compute_firmware`\n- `snapdragon_7s_gen_3_mobile_platform_firmware`\n- `snapdragon_8_elite_firmware`\n- `snapdragon_8_gen_1_mobile_platform_firmware`\n- `snapdragon_8_gen_2_mobile_platform_firmware`\n- `snapdragon_8_gen_3_mobile_platform_firmware`\n- `snapdragon_8+_gen_1_mobile_platform_firmware`\n- `snapdragon_8+_gen_2_mobile_platform_firmware`\n- `snapdragon_865_5g_mobile_platform_firmware`\n- `snapdragon_865+_5g_mobile_platform_firmware`\n- `snapdragon_870_5g_mobile_platform_firmware`\n- `snapdragon_888_5g_mobile_platform_firmware`\n- `snapdragon_888+_5g_mobile_platform_firmware`\n- `snapdragon_auto_5g_modem-rf_firmware`\n- `snapdragon_auto_5g_modem-rf_gen_2_firmware`\n- `snapdragon_w5+_gen_1_wearable_platform_firmware`\n- `snapdragon_x32_5g_modem-rf_system_firmware`\n- `snapdragon_x35_5g_modem-rf_system_firmware`\n- `snapdragon_x53_5g_modem-rf_system_firmware`\n- `snapdragon_x55_5g_modem-rf_system_firmware`\n- `snapdragon_x65_5g_modem-rf_system_firmware`\n- `snapdragon_x70_modem-rf_system_firmware`\n- `snapdragon_x72_5g_modem-rf_system_firmware`\n- `snapdragon_x75_5g_modem-rf_system_firmware`\n- `snapdragon_x80_5g_modem-rf_system_firmware`\n- `sw5100_firmware`\n- `sw5100p_firmware`\n- `sw6100_firmware`\n- `sw6100p_firmware`\n- `themisto_firmware`\n- `wcd9335_firmware`\n- `fastconnect_6700_firmware`\n- `fastconnect_6800_firmware`\n- `fastconnect_6900_firmware`\n- `fastconnect_7800_firmware`\n- `fsm200_platform_firmware`\n- `fsm20055_firmware`\n- `fwa_gen_3_ultra_firmware`\n- `g1_gen_1_firmware`\n- `milos_firmware`\n- `netrani_firmware`\n- `orne_firmware`\n- `palawan25_firmware`\n- `qca6174a_firmware`\n- `qca6391_firmware`\n- `qca6574a_firmware`\n- `qca6574au_firmware`\n- `qca6584au_firmware`\n- `qca6595au_firmware`\n- `qca6678aq_firmware`\n- `qca6688aq_firmware`\n- `qca6696_firmware`\n- `qca6698aq_firmware`\n- `qca6698au_firmware`\n- `qca6797aq_firmware`\n- `qca8081_firmware`\n- `qca8337_firmware`\n- `qcc710_firmware`\n- `qcm2290_firmware`\n- `qcm4325_firmware`\n- `qcm4490_firmware`\n- `qcm5430_firmware`\n- `qcm6490_firmware`\n- `qcn6024_firmware`\n- `qcn6224_firmware`\n- `qcn6274_firmware`\n- `qcn9011_firmware`\n- `qcn9012_firmware`\n- `qcn9024_firmware`\n- `qcs2290_firmware`\n- `qcs4290_firmware`\n- `qcs4490_firmware`\n- `qcs8550_firmware`\n- `qep8111_firmware`\n- `qfw7114_firmware`\n- `qfw7124_firmware`\n- `qmp1000_firmware`\n- `video_collaboration_vc3_platform_firmware`\n- `robotics_rb2_platform_firmware`\n- `sd_8_gen1_5g_firmware`\n- `sd662_firmware`\n- `sdx57m_firmware`\n- `sdx61_firmware`\n- `sdx71m_firmware`\n- `sm6225p_firmware`\n- `sm6250_firmware`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}