{"id":18884,"date":"2025-09-24T10:56:12","date_gmt":"2025-09-24T10:56:12","guid":{"rendered":"http:\/\/localhost\/?p=18884"},"modified":"2025-09-24T10:56:12","modified_gmt":"2025-09-24T10:56:12","slug":"buffer-over-read-in-bt-controller","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=18884","title":{"rendered":"Buffer Over-read in BT Controller_CVE-2025-47318"},"content":{"rendered":"<p>{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Transient DOS while parsing the EPTM test control message to get the test pattern.&#8221;,&#8221;published&#8221;:&#8221;2025-09-24T15:33:51.163Z&#8221;,&#8221;modified&#8221;:&#8221;2025-09-24T15:33:51.163Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Buffer Over-read in BT Controller&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/september-2025-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-47318&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-126&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc. Snapdragon APQ8017\\nQualcomm, Inc. Snapdragon APQ8064AU\\nQualcomm, Inc. Snapdragon AQT1000\\nQualcomm, Inc. Snapdragon AR8031\\nQualcomm, Inc. Snapdragon AR8035\\nQualcomm, Inc. Snapdragon CSRA6620\\nQualcomm, Inc. Snapdragon CSRA6640\\nQualcomm, Inc. Snapdragon CSRB31024\\nQualcomm, Inc. Snapdragon FastConnect 6200\\nQualcomm, Inc. Snapdragon FastConnect 6700\\nQualcomm, Inc. Snapdragon FastConnect 6800\\nQualcomm, Inc. Snapdragon FastConnect 6900\\nQualcomm, Inc. Snapdragon FastConnect 7800\\nQualcomm, Inc. Snapdragon Flight RB5 5G Platform\\nQualcomm, Inc. Snapdragon Home Hub 100 Platform\\nQualcomm, Inc. Snapdragon Immersive Home 214 Platform\\nQualcomm, Inc. Snapdragon Immersive Home 216 Platform\\nQualcomm, Inc. Snapdragon Immersive Home 316 Platform\\nQualcomm, Inc. Snapdragon Immersive Home 318 Platform\\nQualcomm, Inc. Snapdragon IPQ5010\\nQualcomm, Inc. Snapdragon IPQ5028\\nQualcomm, Inc. Snapdragon MDM9628\\nQualcomm, Inc. Snapdragon MDM9640\\nQualcomm, Inc. Snapdragon MSM8996AU\\nQualcomm, Inc. Snapdragon QAM8255P\\nQualcomm, Inc. Snapdragon QAM8295P\\nQualcomm, Inc. Snapdragon QAM8650P\\nQualcomm, Inc. Snapdragon QAM8775P\\nQualcomm, Inc. Snapdragon QAMSRV1H\\nQualcomm, Inc. Snapdragon QAMSRV1M\\nQualcomm, Inc. Snapdragon QCA1062\\nQualcomm, Inc. Snapdragon QCA1064\\nQualcomm, Inc. Snapdragon QCA2066\\nQualcomm, Inc. Snapdragon QCA4024\\nQualcomm, Inc. Snapdragon QCA6174A\\nQualcomm, Inc. Snapdragon QCA6175A\\nQualcomm, Inc. Snapdragon QCA6391\\nQualcomm, Inc. Snapdragon QCA6420\\nQualcomm, Inc. Snapdragon QCA6430\\nQualcomm, Inc. Snapdragon QCA6554A\\nQualcomm, Inc. Snapdragon QCA6564A\\nQualcomm, Inc. Snapdragon QCA6564AU\\nQualcomm, Inc. Snapdragon QCA6574\\nQualcomm, Inc. Snapdragon QCA6574A\\nQualcomm, Inc. Snapdragon QCA6574AU\\nQualcomm, Inc. Snapdragon QCA6584\\nQualcomm, Inc. Snapdragon QCA6584AU\\nQualcomm, Inc. Snapdragon QCA6595\\nQualcomm, Inc. Snapdragon QCA6595AU\\nQualcomm, Inc. Snapdragon QCA6678AQ\\nQualcomm, Inc. Snapdragon QCA6688AQ\\nQualcomm, Inc. Snapdragon QCA6696\\nQualcomm, Inc. Snapdragon QCA6698AQ\\nQualcomm, Inc. Snapdragon QCA6797AQ\\nQualcomm, Inc. Snapdragon QCA8081\\nQualcomm, Inc. Snapdragon QCA8337\\nQualcomm, Inc. Snapdragon QCC2073\\nQualcomm, Inc. Snapdragon QCC2076\\nQualcomm, Inc. Snapdragon QCC5161\\nQualcomm, Inc. Snapdragon QCC710\\nQualcomm, Inc. Snapdragon QCC711\\nQualcomm, Inc. Snapdragon QCC7225\\nQualcomm, Inc. Snapdragon QCC7226\\nQualcomm, Inc. Snapdragon QCC7228\\nQualcomm, Inc. Snapdragon QCM6125\\nQualcomm, Inc. Snapdragon QCN6023\\nQualcomm, Inc. Snapdragon QCN6024\\nQualcomm, Inc. Snapdragon QCN6100\\nQualcomm, Inc. Snapdragon QCN6102\\nQualcomm, Inc. Snapdragon QCN6112\\nQualcomm, Inc. Snapdragon QCN6122\\nQualcomm, Inc. Snapdragon QCN6132\\nQualcomm, Inc. Snapdragon QCN6224\\nQualcomm, Inc. Snapdragon QCN6274\\nQualcomm, Inc. Snapdragon QCN7605\\nQualcomm, Inc. Snapdragon QCN7606\\nQualcomm, Inc. Snapdragon QCN9000\\nQualcomm, Inc. Snapdragon QCN9001\\nQualcomm, Inc. Snapdragon QCN9002\\nQualcomm, Inc. Snapdragon QCN9003\\nQualcomm, Inc. Snapdragon QCN9011\\nQualcomm, Inc. Snapdragon QCN9012\\nQualcomm, Inc. Snapdragon QCN9022\\nQualcomm, Inc. Snapdragon QCN9024\\nQualcomm, Inc. Snapdragon QCN9070\\nQualcomm, Inc. Snapdragon QCN9072\\nQualcomm, Inc. Snapdragon QCN9074\\nQualcomm, Inc. Snapdragon QCN9100\\nQualcomm, Inc. Snapdragon QCN9274\\nQualcomm, Inc. Snapdragon QCS6125\\nQualcomm, Inc. Snapdragon QCS7230\\nQualcomm, Inc. Snapdragon QCS8250\\nQualcomm, Inc. Snapdragon QFW7114\\nQualcomm, Inc. Snapdragon QFW7124\\nQualcomm, Inc. Snapdragon QRB5165M\\nQualcomm, Inc. Snapdragon QRB5165N\\nQualcomm, Inc. Snapdragon Qualcommr Video Collaboration VC1 Platform\\nQualcomm, Inc. Snapdragon Qualcommr Video Collaboration VC5 Platform\\nQualcomm, Inc. Snapdragon Robotics RB5 Platform\\nQualcomm, Inc. Snapdragon S3 Gen 2 Sound Platform\\nQualcomm, Inc. Snapdragon S3 Sound Platform\\nQualcomm, Inc. Snapdragon S5 Gen 2 Sound Platform\\nQualcomm, Inc. Snapdragon S5 Sound Platform\\nQualcomm, Inc. Snapdragon SA4150P\\nQualcomm, Inc. Snapdragon SA4155P\\nQualcomm, Inc. Snapdragon SA6145P\\nQualcomm, Inc. Snapdragon SA6150P\\nQualcomm, Inc. Snapdragon SA6155\\nQualcomm, Inc. Snapdragon SA6155P\\nQualcomm, Inc. Snapdragon SA7255P\\nQualcomm, Inc. Snapdragon SA7775P\\nQualcomm, Inc. Snapdragon SA8145P\\nQualcomm, Inc. Snapdragon SA8150P\\nQualcomm, Inc. Snapdragon SA8155\\nQualcomm, Inc. Snapdragon SA8155P\\nQualcomm, Inc. Snapdragon SA8195P\\nQualcomm, Inc. Snapdragon SA8255P\\nQualcomm, Inc. Snapdragon SA8295P\\nQualcomm, Inc. Snapdragon SA8620P\\nQualcomm, Inc. Snapdragon SA8650P\\nQualcomm, Inc. Snapdragon SA8770P\\nQualcomm, Inc. Snapdragon SA8775P\\nQualcomm, Inc. Snapdragon SA9000P\\nQualcomm, Inc. Snapdragon SD 8 Gen1 5G\\nQualcomm, Inc. Snapdragon SD865 5G\\nQualcomm, Inc. Snapdragon SDX55\\nQualcomm, Inc. Snapdragon SDX61\\nQualcomm, Inc. Snapdragon SG8275\\nQualcomm, Inc. Snapdragon SG8275P\\nQualcomm, Inc. Snapdragon SM7325P\\nQualcomm, Inc. Snapdragon SM8550P\\nQualcomm, Inc. Snapdragon SM8750\\nQualcomm, Inc. Snapdragon SM8750P\\nQualcomm, Inc. Snapdragon Smart Audio 400 Platform\\nQualcomm, Inc. Snapdragon Snapdragon 778G 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)\\nQualcomm, Inc. Snapdragon Snapdragon 782G Mobile Platform (SM7325-AF)\\nQualcomm, Inc. Snapdragon Snapdragon 7c+ Gen 3 Compute\\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8+ Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 820 Automotive Platform\\nQualcomm, Inc. Snapdragon Snapdragon 865 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\\nQualcomm, Inc. Snapdragon Snapdragon 870 5G Mobile Platform (SM8250-AC)\\nQualcomm, Inc. Snapdragon Snapdragon 888 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 888+ 5G Mobile Platform (SM8350-AC)\\nQualcomm, Inc. Snapdragon Snapdragon 8c Compute Platform (SC8180X-AD) \\&#8221;Poipu Lite\\&#8221;\\nQualcomm, Inc. Snapdragon Snapdragon 8cx Compute Platform (SC8180X-AA, AB)\\nQualcomm, Inc. Snapdragon Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) \\&#8221;Poipu Pro\\&#8221;\\nQualcomm, Inc. Snapdragon Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)\\nQualcomm, Inc. Snapdragon Snapdragon AR1 Gen 1 Platform\\nQualcomm, Inc. Snapdragon Snapdragon AR1 Gen 1 Platform \\&#8221;Luna1\\&#8221;\\nQualcomm, Inc. Snapdragon Snapdragon AR2 Gen 1 Platform\\nQualcomm, Inc. Snapdragon Snapdragon Auto 5G Modem-RF\\nQualcomm, Inc. Snapdragon Snapdragon Auto 5G Modem-RF Gen 2\\nQualcomm, Inc. Snapdragon Snapdragon W5+ Gen 1 Wearable Platform\\nQualcomm, Inc. Snapdragon Snapdragon X5 LTE Modem\\nQualcomm, Inc. Snapdragon Snapdragon X55 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon X65 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon X72 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon X75 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon XR2 5G Platform\\nQualcomm, Inc. Snapdragon Snapdragon XR2+ Gen 1 Platform\\nQualcomm, Inc. Snapdragon Snapdragon Auto 4G Modem\\nQualcomm, Inc. Snapdragon SRV1H\\nQualcomm, Inc. Snapdragon SRV1M\\nQualcomm, Inc. Snapdragon SSG2115P\\nQualcomm, Inc. Snapdragon SSG2125P\\nQualcomm, Inc. Snapdragon SW5100\\nQualcomm, Inc. Snapdragon SW5100P\\nQualcomm, Inc. Snapdragon SXR1230P\\nQualcomm, Inc. Snapdragon SXR2230P\\nQualcomm, Inc. Snapdragon SXR2250P\\nQualcomm, Inc. Snapdragon WCD9326\\nQualcomm, Inc. Snapdragon WCD9335\\nQualcomm, Inc. Snapdragon WCD9340\\nQualcomm, Inc. Snapdragon WCD9341\\nQualcomm, Inc. Snapdragon WCD9360\\nQualcomm, Inc. Snapdragon WCD9370\\nQualcomm, Inc. Snapdragon WCD9375\\nQualcomm, Inc. Snapdragon WCD9380\\nQualcomm, Inc. Snapdragon WCD9385\\nQualcomm, Inc. Snapdragon WCD9390\\nQualcomm, Inc. Snapdragon WCD9395\\nQualcomm, Inc. Snapdragon WCN3950\\nQualcomm, Inc. Snapdragon WCN3980\\nQualcomm, Inc. Snapdragon WCN6740\\nQualcomm, Inc. Snapdragon WCN7860\\nQualcomm, Inc. Snapdragon WCN7861\\nQualcomm, Inc. Snapdragon WCN7880\\nQualcomm, Inc. Snapdragon WCN7881\\nQualcomm, Inc. Snapdragon WSA8810\\nQualcomm, Inc. Snapdragon WSA8815\\nQualcomm, Inc. Snapdragon WSA8830\\nQualcomm, Inc. Snapdragon WSA8832\\nQualcomm, Inc. Snapdragon WSA8835\\nQualcomm, Inc. Snapdragon WSA8840\\nQualcomm, Inc. Snapdragon WSA8845\\nQualcomm, Inc. Snapdragon WSA8845H&#8221;,&#8221;sourceHref&#8221;:&#8221;&#8221;,&#8221;cvss&#8221;:{&#8220;score&#8221;:7.5,&#8221;severity&#8221;:&#8221;HIGH&#8221;,&#8221;vector&#8221;:&#8221;CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:H&#8221;,&#8221;version&#8221;:&#8221;3.1&#8243;},&#8221;cvss2&#8243;:{},&#8221;cvss3&#8243;:{&#8220;version&#8221;:&#8221;&#8221;,&#8221;vectorString&#8221;:&#8221;&#8221;,&#8221;baseScore&#8221;:0,&#8221;baseSeverity&#8221;:&#8221;&#8221;,&#8221;attackVector&#8221;:&#8221;&#8221;,&#8221;attackComplexity&#8221;:&#8221;&#8221;,&#8221;privilegesRequired&#8221;:&#8221;&#8221;,&#8221;userInteraction&#8221;:&#8221;&#8221;,&#8221;scope&#8221;:&#8221;&#8221;,&#8221;confidentialityImpact&#8221;:&#8221;&#8221;,&#8221;integrityImpact&#8221;:&#8221;&#8221;,&#8221;availabilityImpact&#8221;:&#8221;&#8221;,&#8221;cvssV3&#8243;:{&#8220;version&#8221;:&#8221;&#8221;,&#8221;vectorString&#8221;:&#8221;&#8221;,&#8221;baseScore&#8221;:0,&#8221;baseSeverity&#8221;:&#8221;&#8221;,&#8221;attackVector&#8221;:&#8221;&#8221;,&#8221;attackComplexity&#8221;:&#8221;&#8221;,&#8221;privilegesRequired&#8221;:&#8221;&#8221;,&#8221;userInteraction&#8221;:&#8221;&#8221;,&#8221;scope&#8221;:&#8221;&#8221;,&#8221;confidentialityImpact&#8221;:&#8221;&#8221;,&#8221;integrityImpact&#8221;:&#8221;&#8221;,&#8221;availabilityImpact&#8221;:&#8221;&#8221;}},&#8221;href&#8221;:&#8221;&#8221;,&#8221;category_name&#8221;:&#8221;CVE&#8221;,&#8221;post_link&#8221;:&#8221;&#8221;,&#8221;product&#8221;:&#8221;Snapdragon&#8221;,&#8221;version&#8221;:&#8221;APQ8017&#8243;,&#8221;vendor&#8221;:&#8221;Qualcomm, Inc.&#8221;,&#8221;ai_description&#8221;:&#8221;&#8221;,&#8221;ai_severity&#8221;:&#8221;&#8221;,&#8221;ai_vendor&#8221;:&#8221;&#8221;,&#8221;ai_product&#8221;:&#8221;&#8221;,&#8221;ai_version&#8221;:&#8221;&#8221;,&#8221;ai_score&#8221;:0}<\/p>\n","protected":false},"excerpt":{"rendered":"<p>{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Transient DOS while parsing the EPTM test control message to get the test pattern.&#8221;,&#8221;published&#8221;:&#8221;2025-09-24T15:33:51.163Z&#8221;,&#8221;modified&#8221;:&#8221;2025-09-24T15:33:51.163Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Buffer Over-read in BT Controller&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/september-2025-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-47318&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-126&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc. Snapdragon APQ8017\\nQualcomm, Inc. Snapdragon APQ8064AU\\nQualcomm, Inc&#8230;.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,16,12,15,13,7,11,5],"class_list":["post-18884","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-75","tag-exploit","tag-high","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Buffer Over-read in BT Controller_CVE-2025-47318 - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=18884\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Buffer Over-read in BT Controller_CVE-2025-47318 - zero redgem\" \/>\n<meta property=\"og:description\" content=\"{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Transient DOS while parsing the EPTM test control message to get the test pattern.&#8221;,&#8221;published&#8221;:&#8221;2025-09-24T15:33:51.163Z&#8221;,&#8221;modified&#8221;:&#8221;2025-09-24T15:33:51.163Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Buffer Over-read in BT Controller&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/september-2025-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-47318&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-126&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc. Snapdragon APQ8017nQualcomm, Inc. Snapdragon APQ8064AUnQualcomm, Inc....\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=18884\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2025-09-24T10:56:12+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=18884#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=18884\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"Buffer Over-read in BT Controller_CVE-2025-47318\",\"datePublished\":\"2025-09-24T10:56:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=18884\"},\"wordCount\":1160,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"CVSS-7.5\",\"exploit\",\"HIGH\",\"news\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_cve\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=18884#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=18884\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=18884\",\"name\":\"Buffer Over-read in BT Controller_CVE-2025-47318 - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2025-09-24T10:56:12+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=18884#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=18884\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=18884#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Buffer Over-read in BT Controller_CVE-2025-47318\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Buffer Over-read in BT Controller_CVE-2025-47318 - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=18884","og_locale":"en_US","og_type":"article","og_title":"Buffer Over-read in BT Controller_CVE-2025-47318 - zero redgem","og_description":"{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Transient DOS while parsing the EPTM test control message to get the test pattern.&#8221;,&#8221;published&#8221;:&#8221;2025-09-24T15:33:51.163Z&#8221;,&#8221;modified&#8221;:&#8221;2025-09-24T15:33:51.163Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Buffer Over-read in BT Controller&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/september-2025-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-47318&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-126&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc. Snapdragon APQ8017nQualcomm, Inc. Snapdragon APQ8064AUnQualcomm, Inc....","og_url":"https:\/\/zero.redgem.net\/?p=18884","og_site_name":"zero redgem","article_published_time":"2025-09-24T10:56:12+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=18884#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=18884"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"Buffer Over-read in BT Controller_CVE-2025-47318","datePublished":"2025-09-24T10:56:12+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=18884"},"wordCount":1160,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","CVSS-7.5","exploit","HIGH","news","Security","tapic","Vulnerability"],"articleSection":["category_cve"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=18884#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=18884","url":"https:\/\/zero.redgem.net\/?p=18884","name":"Buffer Over-read in BT Controller_CVE-2025-47318 - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2025-09-24T10:56:12+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=18884#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=18884"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=18884#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"Buffer Over-read in BT Controller_CVE-2025-47318"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/18884","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=18884"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/18884\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=18884"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=18884"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=18884"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}