PT-2025-44926 · Smss · Smss

Published 2025-08-04 · Updated 2025-11-05 · CVE-2025-47357

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions versions prior to November 4, 2025

Description An information disclosure issue exists when a user-level driver performs QFPROM read or write operations on Fuse regions. The issue involves missing authentication for a critical function in SMSS.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2025-13948

CVE-2025-47357

Affected Products

Smss

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-47357 · Security Note
• https://bdu.fstec.ru/vul/2025-13948 · Security Note
• https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html · Vendor Advisory
• https://t.me/CVEtracker/36467 · Telegram Post
• https://t.me/cveNotify/141490 · Telegram Post
• https://t.me/cveNotify/141824 · Telegram Post