Buffer Over-read in BT Controller_CVE-2025-47317

7.8 / 10

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

Basic Information

ID CVE-2025-47317

Source qualcomm

Published Sep 24, 2025 at 15:33

Affected Product

Vendor Qualcomm, Inc.

Product Snapdragon

Version FastConnect 6200

Affected Versions Qualcomm, Inc. Snapdragon FastConnect 6200
Qualcomm, Inc. Snapdragon FastConnect 6700
Qualcomm, Inc. Snapdragon FastConnect 7800
Qualcomm, Inc. Snapdragon QCC5161
Qualcomm, Inc. Snapdragon QCC710
Qualcomm, Inc. Snapdragon QCC711
Qualcomm, Inc. Snapdragon QCC7225
Qualcomm, Inc. Snapdragon QCC7226
Qualcomm, Inc. Snapdragon QCC7228
Qualcomm, Inc. Snapdragon QMP1000
Qualcomm, Inc. Snapdragon S3 Gen 2 Sound Platform
Qualcomm, Inc. Snapdragon S3 Sound Platform
Qualcomm, Inc. Snapdragon S5 Gen 2 Sound Platform
Qualcomm, Inc. Snapdragon S5 Sound Platform
Qualcomm, Inc. Snapdragon SM6475
Qualcomm, Inc. Snapdragon SM6650
Qualcomm, Inc. Snapdragon SM6650P
Qualcomm, Inc. Snapdragon SM7435
Qualcomm, Inc. Snapdragon SM7550
Qualcomm, Inc. Snapdragon SM7550P
Qualcomm, Inc. Snapdragon SM7635
Qualcomm, Inc. Snapdragon SM7635P
Qualcomm, Inc. Snapdragon SM7675
Qualcomm, Inc. Snapdragon SM7675P
Qualcomm, Inc. Snapdragon SM8635
Qualcomm, Inc. Snapdragon SM8635P
Qualcomm, Inc. Snapdragon SM8735
Qualcomm, Inc. Snapdragon SM8750
Qualcomm, Inc. Snapdragon SM8750P
Qualcomm, Inc. Snapdragon Snapdragon 6 Gen 1 Mobile Platform
Qualcomm, Inc. Snapdragon WCD9370
Qualcomm, Inc. Snapdragon WCD9371
Qualcomm, Inc. Snapdragon WCD9375
Qualcomm, Inc. Snapdragon WCD9378
Qualcomm, Inc. Snapdragon WCD9385
Qualcomm, Inc. Snapdragon WCD9390
Qualcomm, Inc. Snapdragon WCD9395
Qualcomm, Inc. Snapdragon WCN3988
Qualcomm, Inc. Snapdragon WCN6650
Qualcomm, Inc. Snapdragon WCN6755
Qualcomm, Inc. Snapdragon WCN7750
Qualcomm, Inc. Snapdragon WCN7860
Qualcomm, Inc. Snapdragon WCN7861
Qualcomm, Inc. Snapdragon WCN7880
Qualcomm, Inc. Snapdragon WCN7881
Qualcomm, Inc. Snapdragon WSA8810
Qualcomm, Inc. Snapdragon WSA8815
Qualcomm, Inc. Snapdragon WSA8830
Qualcomm, Inc. Snapdragon WSA8832
Qualcomm, Inc. Snapdragon WSA8835
Qualcomm, Inc. Snapdragon WSA8840
Qualcomm, Inc. Snapdragon WSA8845
Qualcomm, Inc. Snapdragon WSA8845H

CWE Classification

CWE-126

References

docs.qualcomm.com /product/publicresources/securitybulletin/september-2025-bulletin.html

{
    "lastseen": "",
    "description": "Memory corruption due to global buffer overflow when a test command uses an invalid payload type.",
    "published": "2025-09-24T15:33:49.869Z",
    "modified": "2025-09-24T15:33:49.869Z",
    "type": "cve",
    "title": "Buffer Over-read in BT Controller",
    "source": "qualcomm",
    "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html",
    "id": "CVE-2025-47317",
    "bulletinFamily": "",
    "cwe": [
        "CWE-126"
    ],
    "cvelist": null,
    "sourceData": "Qualcomm, Inc. Snapdragon FastConnect 6200\nQualcomm, Inc. Snapdragon FastConnect 6700\nQualcomm, Inc. Snapdragon FastConnect 7800\nQualcomm, Inc. Snapdragon QCC5161\nQualcomm, Inc. Snapdragon QCC710\nQualcomm, Inc. Snapdragon QCC711\nQualcomm, Inc. Snapdragon QCC7225\nQualcomm, Inc. Snapdragon QCC7226\nQualcomm, Inc. Snapdragon QCC7228\nQualcomm, Inc. Snapdragon QMP1000\nQualcomm, Inc. Snapdragon S3 Gen 2 Sound Platform\nQualcomm, Inc. Snapdragon S3 Sound Platform\nQualcomm, Inc. Snapdragon S5 Gen 2 Sound Platform\nQualcomm, Inc. Snapdragon S5 Sound Platform\nQualcomm, Inc. Snapdragon SM6475\nQualcomm, Inc. Snapdragon SM6650\nQualcomm, Inc. Snapdragon SM6650P\nQualcomm, Inc. Snapdragon SM7435\nQualcomm, Inc. Snapdragon SM7550\nQualcomm, Inc. Snapdragon SM7550P\nQualcomm, Inc. Snapdragon SM7635\nQualcomm, Inc. Snapdragon SM7635P\nQualcomm, Inc. Snapdragon SM7675\nQualcomm, Inc. Snapdragon SM7675P\nQualcomm, Inc. Snapdragon SM8635\nQualcomm, Inc. Snapdragon SM8635P\nQualcomm, Inc. Snapdragon SM8735\nQualcomm, Inc. Snapdragon SM8750\nQualcomm, Inc. Snapdragon SM8750P\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 1 Mobile Platform\nQualcomm, Inc. Snapdragon WCD9370\nQualcomm, Inc. Snapdragon WCD9371\nQualcomm, Inc. Snapdragon WCD9375\nQualcomm, Inc. Snapdragon WCD9378\nQualcomm, Inc. Snapdragon WCD9385\nQualcomm, Inc. Snapdragon WCD9390\nQualcomm, Inc. Snapdragon WCD9395\nQualcomm, Inc. Snapdragon WCN3988\nQualcomm, Inc. Snapdragon WCN6650\nQualcomm, Inc. Snapdragon WCN6755\nQualcomm, Inc. Snapdragon WCN7750\nQualcomm, Inc. Snapdragon WCN7860\nQualcomm, Inc. Snapdragon WCN7861\nQualcomm, Inc. Snapdragon WCN7880\nQualcomm, Inc. Snapdragon WCN7881\nQualcomm, Inc. Snapdragon WSA8810\nQualcomm, Inc. Snapdragon WSA8815\nQualcomm, Inc. Snapdragon WSA8830\nQualcomm, Inc. Snapdragon WSA8832\nQualcomm, Inc. Snapdragon WSA8835\nQualcomm, Inc. Snapdragon WSA8840\nQualcomm, Inc. Snapdragon WSA8845\nQualcomm, Inc. Snapdragon WSA8845H",
    "sourceHref": "",
    "cvss": {
        "score": 7.8,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Snapdragon",
    "version": "FastConnect 6200",
    "vendor": "Qualcomm, Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}