CVE-2025-47325

Untrusted Pointer Dereference in TZ Firmware

Published Dec 18, 2025 CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Description

Information disclosure while processing system calls with invalid parameters.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Qualcomm, Inc.

Snapdragon

unaffected

Version	Status	Constraints
`CSR8811`	affected	—
`IPQ8070`	affected	—
`IPQ8070A`	affected	—
`IPQ8071`	affected	—
`IPQ8071A`	affected	—
`IPQ8072`	affected	—
`IPQ8072A`	affected	—
`IPQ8074`	affected	—
`IPQ8074A`	affected	—
`IPQ8076`	affected	—
`IPQ8076A`	affected	—
`IPQ8078`	affected	—
`IPQ8078A`	affected	—
`IPQ8173`	affected	—
`IPQ8174`	affected	—
`PMP8074`	affected	—
`QCA4024`	affected	—
`QCA6428`	affected	—
`QCA6438`	affected	—
`QCA8072`	affected	—
`QCA8075`	affected	—
`QCA8081`	affected	—
`QCA9888`	affected	—
`QCA9889`	affected	—
`QCN5022`	affected	—
`QCN5024`	affected	—
`QCN5052`	affected	—
`QCN5054`	affected	—
`QCN5064`	affected	—
`QCN5122`	affected	—
`QCN5124`	affected	—
`QCN5152`	affected	—
`QCN5154`	affected	—
`QCN5164`	affected	—
`QCN5550`	affected	—
`QCN6023`	affected	—
`QCN6024`	affected	—
`QCN9000`	affected	—
`QCN9022`	affected	—
`QCN9024`	affected	—
`QCN9070`	affected	—
`QCN9072`	affected	—
`QCN9074`	affected	—
`SDX55`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:qualcomm:qcn5022_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn5022:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:qualcomm:qcn5024_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn5024:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:qualcomm:qcn5052_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn5052:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:qualcomm:qcn5054_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn5054:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:qualcomm:qcn5064_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn5064:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:qualcomm:qcn5122_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn5122:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:qualcomm:qcn5124_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn5124:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:qualcomm:qcn5152_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn5152:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:qualcomm:qcn5154_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn5154:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:qualcomm:qcn5164_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn5164:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:qualcomm:qcn5550_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn5550:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:qualcomm:qcn6023_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn6023:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn6024:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:qualcomm:qcn9000_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn9000:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:qualcomm:qcn9022_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn9022:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn9024:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:qualcomm:qcn9070_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn9070:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

cpe:2.3:o:qualcomm:qcn9072_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn9072:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qcn9074:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:qualcomm:qca9889_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca9889:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:qualcomm:qca9888_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca9888:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND

cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:qualcomm:qca8075_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca8075:-:*:*:*:*:*:*:*

Configuration 25 [-]

AND

cpe:2.3:o:qualcomm:qca8072_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca8072:-:*:*:*:*:*:*:*

Configuration 26 [-]

AND

cpe:2.3:o:qualcomm:qca6438_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6438:-:*:*:*:*:*:*:*

Configuration 27 [-]

AND

cpe:2.3:o:qualcomm:qca6428_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca6428:-:*:*:*:*:*:*:*

Configuration 28 [-]

AND

cpe:2.3:o:qualcomm:qca4024_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:qca4024:-:*:*:*:*:*:*:*

Configuration 29 [-]

AND

cpe:2.3:o:qualcomm:pmp8074_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:pmp8074:-:*:*:*:*:*:*:*

Configuration 30 [-]

AND

cpe:2.3:o:qualcomm:ipq8174_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8174:-:*:*:*:*:*:*:*

Configuration 31 [-]

AND

cpe:2.3:o:qualcomm:ipq8173_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8173:-:*:*:*:*:*:*:*

Configuration 32 [-]

AND

cpe:2.3:o:qualcomm:ipq8078a_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8078a:-:*:*:*:*:*:*:*

Configuration 33 [-]

AND

cpe:2.3:o:qualcomm:ipq8078_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8078:-:*:*:*:*:*:*:*

Configuration 34 [-]

AND

cpe:2.3:o:qualcomm:ipq8076a_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8076a:-:*:*:*:*:*:*:*

Configuration 35 [-]

AND

cpe:2.3:o:qualcomm:ipq8076_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8076:-:*:*:*:*:*:*:*

Configuration 36 [-]

AND

cpe:2.3:o:qualcomm:ipq8074a_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8074a:-:*:*:*:*:*:*:*

Configuration 37 [-]

AND

cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*

Configuration 38 [-]

AND

cpe:2.3:o:qualcomm:ipq8072a_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8072a:-:*:*:*:*:*:*:*

Configuration 39 [-]

AND

cpe:2.3:o:qualcomm:ipq8072_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8072:-:*:*:*:*:*:*:*

Configuration 40 [-]

AND

cpe:2.3:o:qualcomm:ipq8071a_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8071a:-:*:*:*:*:*:*:*

Configuration 41 [-]

AND

cpe:2.3:o:qualcomm:ipq8071_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8071:-:*:*:*:*:*:*:*

Configuration 42 [-]

AND

cpe:2.3:o:qualcomm:ipq8070a_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8070a:-:*:*:*:*:*:*:*

Configuration 43 [-]

AND

cpe:2.3:o:qualcomm:ipq8070_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:ipq8070:-:*:*:*:*:*:*:*

Configuration 44 [-]

AND

cpe:2.3:o:qualcomm:csr8811_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:qualcomm:csr8811:-:*:*:*:*:*:*:*

No data.

Vendor	Product	Versions
Qualcomm	Snapdragon	—

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.079% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html

History

Dec 23, 2025 10:00 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Qualcomm csr8811 Qualcomm csr8811 Firmware Qualcomm ipq8070 Qualcomm ipq8070 Firmware Qualcomm ipq8070a Qualcomm ipq8070a Firmware Qualcomm ipq8071 Qualcomm ipq8071 Firmware Qualcomm ipq8071a Qualcomm ipq8071a Firmware Qualcomm ipq8072 Qualcomm ipq8072 Firmware Qualcomm ipq8072a Qualcomm ipq8072a Firmware Qualcomm ipq8074 Qualcomm ipq8074 Firmware Qualcomm ipq8074a Qualcomm ipq8074a Firmware Qualcomm ipq8076 Qualcomm ipq8076 Firmware Qualcomm ipq8076a Qualcomm ipq8076a Firmware Qualcomm ipq8078 Qualcomm ipq8078 Firmware Qualcomm ipq8078a Qualcomm ipq8078a Firmware Qualcomm ipq8173 Qualcomm ipq8173 Firmware Qualcomm ipq8174 Qualcomm ipq8174 Firmware Qualcomm pmp8074 Qualcomm pmp8074 Firmware Qualcomm qca4024 Qualcomm qca4024 Firmware Qualcomm qca6428 Qualcomm qca6428 Firmware Qualcomm qca6438 Qualcomm qca6438 Firmware Qualcomm qca8072 Qualcomm qca8072 Firmware Qualcomm qca8075 Qualcomm qca8075 Firmware Qualcomm qca8081 Qualcomm qca8081 Firmware Qualcomm qca9888 Qualcomm qca9888 Firmware Qualcomm qca9889 Qualcomm qca9889 Firmware Qualcomm qcn5022 Qualcomm qcn5022 Firmware Qualcomm qcn5024 Qualcomm qcn5024 Firmware Qualcomm qcn5052 Qualcomm qcn5052 Firmware Qualcomm qcn5054 Qualcomm qcn5054 Firmware Qualcomm qcn5064 Qualcomm qcn5064 Firmware Qualcomm qcn5122 Qualcomm qcn5122 Firmware Qualcomm qcn5124 Qualcomm qcn5124 Firmware Qualcomm qcn5152 Qualcomm qcn5152 Firmware Qualcomm qcn5154 Qualcomm qcn5154 Firmware Qualcomm qcn5164 Qualcomm qcn5164 Firmware Qualcomm qcn5550 Qualcomm qcn5550 Firmware Qualcomm qcn6023 Qualcomm qcn6023 Firmware Qualcomm qcn6024 Qualcomm qcn6024 Firmware Qualcomm qcn9000 Qualcomm qcn9000 Firmware Qualcomm qcn9022 Qualcomm qcn9022 Firmware Qualcomm qcn9024 Qualcomm qcn9024 Firmware Qualcomm qcn9070 Qualcomm qcn9070 Firmware Qualcomm qcn9072 Qualcomm qcn9072 Firmware Qualcomm qcn9074 Qualcomm qcn9074 Firmware Qualcomm sdx55 Qualcomm sdx55 Firmware
CPEs		cpe:2.3:h:qualcomm:csr8811:-:::::::* cpe:2.3:h:qualcomm:ipq8070:-:::::::* cpe:2.3:h:qualcomm:ipq8070a:-:::::::* cpe:2.3:h:qualcomm:ipq8071:-:::::::* cpe:2.3:h:qualcomm:ipq8071a:-:::::::* cpe:2.3:h:qualcomm:ipq8072:-:::::::* cpe:2.3:h:qualcomm:ipq8072a:-:::::::* cpe:2.3:h:qualcomm:ipq8074:-:::::::* cpe:2.3:h:qualcomm:ipq8074a:-:::::::* cpe:2.3:h:qualcomm:ipq8076:-:::::::* cpe:2.3:h:qualcomm:ipq8076a:-:::::::* cpe:2.3:h:qualcomm:ipq8078:-:::::::* cpe:2.3:h:qualcomm:ipq8078a:-:::::::* cpe:2.3:h:qualcomm:ipq8173:-:::::::* cpe:2.3:h:qualcomm:ipq8174:-:::::::* cpe:2.3:h:qualcomm:pmp8074:-:::::::* cpe:2.3:h:qualcomm:qca4024:-:::::::* cpe:2.3:h:qualcomm:qca6428:-:::::::* cpe:2.3:h:qualcomm:qca6438:-:::::::* cpe:2.3:h:qualcomm:qca8072:-:::::::* cpe:2.3:h:qualcomm:qca8075:-:::::::* cpe:2.3:h:qualcomm:qca8081:-:::::::* cpe:2.3:h:qualcomm:qca9888:-:::::::* cpe:2.3:h:qualcomm:qca9889:-:::::::* cpe:2.3:h:qualcomm:qcn5022:-:::::::* cpe:2.3:h:qualcomm:qcn5024:-:::::::* cpe:2.3:h:qualcomm:qcn5052:-:::::::* cpe:2.3:h:qualcomm:qcn5054:-:::::::* cpe:2.3:h:qualcomm:qcn5064:-:::::::* cpe:2.3:h:qualcomm:qcn5122:-:::::::* cpe:2.3:h:qualcomm:qcn5124:-:::::::* cpe:2.3:h:qualcomm:qcn5152:-:::::::* cpe:2.3:h:qualcomm:qcn5154:-:::::::* cpe:2.3:h:qualcomm:qcn5164:-:::::::* cpe:2.3:h:qualcomm:qcn5550:-:::::::* cpe:2.3:h:qualcomm:qcn6023:-:::::::* cpe:2.3:h:qualcomm:qcn6024:-:::::::* cpe:2.3:h:qualcomm:qcn9000:-:::::::* cpe:2.3:h:qualcomm:qcn9022:-:::::::* cpe:2.3:h:qualcomm:qcn9024:-:::::::* cpe:2.3:h:qualcomm:qcn9070:-:::::::* cpe:2.3:h:qualcomm:qcn9072:-:::::::* cpe:2.3:h:qualcomm:qcn9074:-:::::::* cpe:2.3:h:qualcomm:sdx55:-:::::::* cpe:2.3:o:qualcomm:csr8811_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8070_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8070a_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8071_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8071a_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8072_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8072a_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8074_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8074a_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8076_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8076a_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8078_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8078a_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8173_firmware:-:::::::* cpe:2.3:o:qualcomm:ipq8174_firmware:-:::::::* cpe:2.3:o:qualcomm:pmp8074_firmware:-:::::::* cpe:2.3:o:qualcomm:qca4024_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6428_firmware:-:::::::* cpe:2.3:o:qualcomm:qca6438_firmware:-:::::::* cpe:2.3:o:qualcomm:qca8072_firmware:-:::::::* cpe:2.3:o:qualcomm:qca8075_firmware:-:::::::* cpe:2.3:o:qualcomm:qca8081_firmware:-:::::::* cpe:2.3:o:qualcomm:qca9888_firmware:-:::::::* cpe:2.3:o:qualcomm:qca9889_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn5022_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn5024_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn5052_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn5054_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn5064_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn5122_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn5124_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn5152_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn5154_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn5164_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn5550_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn6023_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn6024_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn9000_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn9022_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn9024_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn9070_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn9072_firmware:-:::::::* cpe:2.3:o:qualcomm:qcn9074_firmware:-:::::::* cpe:2.3:o:qualcomm:sdx55_firmware:-:::::::*
Vendors & Products		Qualcomm csr8811 Qualcomm csr8811 Firmware Qualcomm ipq8070 Qualcomm ipq8070 Firmware Qualcomm ipq8070a Qualcomm ipq8070a Firmware Qualcomm ipq8071 Qualcomm ipq8071 Firmware Qualcomm ipq8071a Qualcomm ipq8071a Firmware Qualcomm ipq8072 Qualcomm ipq8072 Firmware Qualcomm ipq8072a Qualcomm ipq8072a Firmware Qualcomm ipq8074 Qualcomm ipq8074 Firmware Qualcomm ipq8074a Qualcomm ipq8074a Firmware Qualcomm ipq8076 Qualcomm ipq8076 Firmware Qualcomm ipq8076a Qualcomm ipq8076a Firmware Qualcomm ipq8078 Qualcomm ipq8078 Firmware Qualcomm ipq8078a Qualcomm ipq8078a Firmware Qualcomm ipq8173 Qualcomm ipq8173 Firmware Qualcomm ipq8174 Qualcomm ipq8174 Firmware Qualcomm pmp8074 Qualcomm pmp8074 Firmware Qualcomm qca4024 Qualcomm qca4024 Firmware Qualcomm qca6428 Qualcomm qca6428 Firmware Qualcomm qca6438 Qualcomm qca6438 Firmware Qualcomm qca8072 Qualcomm qca8072 Firmware Qualcomm qca8075 Qualcomm qca8075 Firmware Qualcomm qca8081 Qualcomm qca8081 Firmware Qualcomm qca9888 Qualcomm qca9888 Firmware Qualcomm qca9889 Qualcomm qca9889 Firmware Qualcomm qcn5022 Qualcomm qcn5022 Firmware Qualcomm qcn5024 Qualcomm qcn5024 Firmware Qualcomm qcn5052 Qualcomm qcn5052 Firmware Qualcomm qcn5054 Qualcomm qcn5054 Firmware Qualcomm qcn5064 Qualcomm qcn5064 Firmware Qualcomm qcn5122 Qualcomm qcn5122 Firmware Qualcomm qcn5124 Qualcomm qcn5124 Firmware Qualcomm qcn5152 Qualcomm qcn5152 Firmware Qualcomm qcn5154 Qualcomm qcn5154 Firmware Qualcomm qcn5164 Qualcomm qcn5164 Firmware Qualcomm qcn5550 Qualcomm qcn5550 Firmware Qualcomm qcn6023 Qualcomm qcn6023 Firmware Qualcomm qcn6024 Qualcomm qcn6024 Firmware Qualcomm qcn9000 Qualcomm qcn9000 Firmware Qualcomm qcn9022 Qualcomm qcn9022 Firmware Qualcomm qcn9024 Qualcomm qcn9024 Firmware Qualcomm qcn9070 Qualcomm qcn9070 Firmware Qualcomm qcn9072 Qualcomm qcn9072 Firmware Qualcomm qcn9074 Qualcomm qcn9074 Firmware Qualcomm sdx55 Qualcomm sdx55 Firmware

Dec 18, 2025 3:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Dec 18, 2025 10:00 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Qualcomm Qualcomm snapdragon
Vendors & Products		Qualcomm Qualcomm snapdragon

Dec 18, 2025 5:45 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Information disclosure while processing system calls with invalid parameters.
Title		Untrusted Pointer Dereference in TZ Firmware
Weaknesses		CWE-822
References		https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N'}`

Subscriptions

Qualcomm Csr8811 Csr8811 Firmware Ipq8070 Ipq8070 Firmware Ipq8070a Ipq8070a Firmware Ipq8071 Ipq8071 Firmware Ipq8071a Ipq8071a Firmware Ipq8072 Ipq8072 Firmware Ipq8072a Ipq8072a Firmware Ipq8074 Ipq8074 Firmware Ipq8074a Ipq8074a Firmware Ipq8076 Ipq8076 Firmware Ipq8076a Ipq8076a Firmware Ipq8078 Ipq8078 Firmware Ipq8078a Ipq8078a Firmware Ipq8173 Ipq8173 Firmware Ipq8174 Ipq8174 Firmware Pmp8074 Pmp8074 Firmware Qca4024 Qca4024 Firmware Qca6428 Qca6428 Firmware Qca6438 Qca6438 Firmware Qca8072 Qca8072 Firmware Qca8075 Qca8075 Firmware Qca8081 Qca8081 Firmware Qca9888 Qca9888 Firmware Qca9889 Qca9889 Firmware Qcn5022 Qcn5022 Firmware Qcn5024 Qcn5024 Firmware Qcn5052 Qcn5052 Firmware Qcn5054 Qcn5054 Firmware Qcn5064 Qcn5064 Firmware Qcn5122 Qcn5122 Firmware Qcn5124 Qcn5124 Firmware Qcn5152 Qcn5152 Firmware Qcn5154 Qcn5154 Firmware Qcn5164 Qcn5164 Firmware Qcn5550 Qcn5550 Firmware Qcn6023 Qcn6023 Firmware Qcn6024 Qcn6024 Firmware Qcn9000 Qcn9000 Firmware Qcn9022 Qcn9022 Firmware Qcn9024 Qcn9024 Firmware Qcn9070 Qcn9070 Firmware Qcn9072 Qcn9072 Firmware Qcn9074 Qcn9074 Firmware Sdx55 Sdx55 Firmware Snapdragon

Weaknesses