PT-2025-51837 · Qualcomm · Qualcomm Embedded Platform Dsp Firmware

Qsrc + 1 · Published 2025-09-01 · Updated 2025-12-23 · CVE-2025-47382

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Qualcomm embedded platform firmware (affected versions not specified)

Description A memory corruption issue exists when loading invalid firmware during the boot process. This flaw is related to authorization mechanism deficiencies within the Qualcomm embedded platform firmware. Exploitation of this issue could allow an attacker to cause memory damage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2025-16033

CVE-2025-47382

Affected Products

Qualcomm Embedded Platform Dsp Firmware

References · 6

• https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47382 · Security Note
• https://bdu.fstec.ru/vul/2025-16033 · Security Note
• https://twitter.com/CVEnew/status/2002466829357220079 · Twitter Post
• https://t.me/cveNotify/146171 · Telegram Post
• https://twitter.com/cracbot/status/2003420370767151309 · Twitter Post