CVE-2025-47357
Estado: AnalizadaAlta (7.8)—
Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.08%
- Percentil entre todas las CVEs puntuadas: 0
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1068Exploitation for Privilege Escalationprivilege escalation85 % - Impacto principal
T1552Unsecured Credentialscredential access90 % - Impacto secundario
T1078Valid Accountsstealth · persistence · privilege escalation · initial access75 %
AV:L + PR:L sin UI indica escalada local: un driver a nivel usuario accede a QFPROM (fusibles). Impacto: lectura de secretos (T1552) confirmada explícitamente; credenciales potenciales en fusibles (T1078) como impacto secundario.
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (24)
Qualcomm — Qam8255p FirmwareQualcomm — Qam8620p FirmwareQualcomm — Qam8650p FirmwareQualcomm — Qam8775p FirmwareQualcomm — Qamsrv1h FirmwareQualcomm — Qamsrv1m FirmwareQualcomm — Qca6595 FirmwareQualcomm — Qca6595au FirmwareQualcomm — Qca6678aq FirmwareQualcomm — Qca6696 FirmwareQualcomm — Qca6698aq FirmwareQualcomm — Qca6797aq FirmwareQualcomm — Qcs9100 FirmwareQualcomm — Sa7255p FirmwareQualcomm — Sa7775p FirmwareQualcomm — Sa8255p FirmwareQualcomm — Sa8620p FirmwareQualcomm — Sa8650p FirmwareQualcomm — Sa8770p FirmwareQualcomm — Sa8775p FirmwareQualcomm — Sa9000p FirmwareQualcomm — Srv1h FirmwareQualcomm — Srv1l FirmwareQualcomm — Srv1m Firmware
CWE
- CWE-306
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-47357",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-47357",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-11-04T19:18:40.520980Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "product-security@qualcomm.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.5,
"exploitabilityScore": 2.5
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "product-security@qualcomm.com",
"affectedData": [
{
"vendor": "Qualcomm, Inc.",
"product": "Snapdragon",
"versions": [
{
"status": "affected",
"version": "QAM8255P"
},
{
"status": "affected",
"version": "QAM8620P"
},
{
"status": "affected",
"version": "QAM8650P"
},
{
"status": "affected",
"version": "QAM8775P"
},
{
"status": "affected",
"version": "QAMSRV1H"
},
{
"status": "affected",
"version": "QAMSRV1M"
},
{
"status": "affected",
"version": "QCA6595"
},
{
"status": "affected",
"version": "QCA6595AU"
},
{
"status": "affected",
"version": "QCA6678AQ"
},
{
"status": "affected",
"version": "QCA6696"
},
{
"status": "affected",
"version": "QCA6698AQ"
},
{
"status": "affected",
"version": "QCA6797AQ"
},
{
"status": "affected",
"version": "QCS9100"
},
{
"status": "affected",
"version": "SA7255P"
},
{
"status": "affected",
"version": "SA7775P"
},
{
"status": "affected",
"version": "SA8255P"
},
{
"status": "affected",
"version": "SA8620P"
},
{
"status": "affected",
"version": "SA8650P"
},
{
"status": "affected",
"version": "SA8770P"
},
{
"status": "affected",
"version": "SA8775P"
},
{
"status": "affected",
"version": "SA9000P"
},
{
"status": "affected",
"version": "SRV1H"
},
{
"status": "affected",
"version": "SRV1L"
},
{
"status": "affected",
"version": "SRV1M"
}
],
"platforms": [
"Snapdragon Auto",
"Snapdragon Industrial IOT"
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2025-11-04T04:15:38.600",
"references": [
{
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html",
"tags": [
"Vendor Advisory"
],
"source": "product-security@qualcomm.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "product-security@qualcomm.com",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions."
}
],
"lastModified": "2026-06-17T09:27:51.517",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3723C7B1-A7E2-401F-8D6D-189350F6BCA5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B12B89EF-7B12-481E-BCBC-F12B9D16321A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qam8620p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBAC2260-52E3-49DE-97EA-F80DBD837FD3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qam8620p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "17599B8D-5753-4408-B4CD-AAA65C826922"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qam8650p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "295E75BD-2A6C-4A76-A376-A9977DDB17FF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qam8650p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BD37AA1A-B911-45BF-9BCC-C772FA83E657"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49B2DF91-BE6B-4E9E-B63C-98DADD29AD6B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qam8775p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "58170126-928F-4AE5-B5AF-5ED4710F9BA2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qamsrv1h_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8673334-5E11-4E95-B33D-3029499F71DF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qamsrv1h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EC0B32F6-5EF0-4591-99D7-D0E9B09DEC5A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qamsrv1m_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE03AB2A-3ED9-4489-8E5B-4FCF8BAA8559"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qamsrv1m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9E646738-6A87-4470-9640-6A5A1DF3AF78"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "643EC76D-2836-48E6-81DA-78C4883C33CA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "477F6529-4CE1-44FC-B6EE-D24D44C71AE7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "288F637F-22F8-47CF-B67F-C798A730A1BD"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D0996EA3-1C92-4933-BE34-9CF625E59FE7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qca6678aq_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D001127D-8160-42F0-B8B9-2FAA2976B530"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qca6678aq:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C9EB615F-FD4C-450B-AB25-E936FD9816C4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AE207DB-9770-40ED-961D-FDA75965826F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0E23922D-C37F-476F-A623-4C1458A9156F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FA1F8F4-EAF2-4704-A8A6-19AD3CA1B577"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B3F7853D-09EE-476F-B48D-BB30AEB4A67D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qca6797aq_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "797295C2-535C-46A9-A725-E1A5405F0436"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qca6797aq:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8BFC575E-594E-4711-94B1-2DC8D03B9AC4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcs9100_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "057E49CC-28C0-4A82-A895-6E681AB1E22F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcs9100:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6A7FE265-B8C2-4423-9F13-A64111248D65"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sa7255p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B651F0A-34DA-400F-A376-B499BFDF8E86"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sa7255p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4CFF093D-98C8-470F-8330-E5126E06343A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sa7775p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C32CA38-5D48-4108-9858-FD66E20CAF2F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sa7775p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E1997F8B-17B8-4DE3-BCF7-726928720592"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC6E268D-C4AF-4950-9223-39EA36D538A8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "073C1A81-D02B-4F2F-9378-CD1B2DCE0E5B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sa8620p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6ACE6D64-A498-482F-8270-718F4884CFFD"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sa8620p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B6E016D6-1B83-4261-A27E-1F9873F81E14"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sa8650p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0E807AA-5646-48AD-9A5C-B0B13E222AA9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sa8650p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "45FBB72B-B850-4E3F-ACBB-9392157FF131"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "781CCC31-C08F-499B-BE73-6C7DB70437AF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sa8770p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "75AFAA21-0589-4C6A-9418-34EE8A61BBAD"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C79595B-1259-4431-96F9-C5A24E624305"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sa8775p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0F2F3431-9CD7-4D4F-833D-DD4D3ACF94C7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A024AB04-B213-4018-A4C1-FA467C7BA775"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A2A8AB7C-5D34-4794-8C06-2193075B323F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:srv1h_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0CD199F5-DA68-4BEB-AA99-11572DA26B4F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:srv1h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8ACA2D4D-FC77-4C1A-8278-1C27B3EA3303"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:srv1l_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B88B3A43-24DD-44EB-AEF1-B7ECAB97C0FB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:srv1l:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "07602885-8BEA-4820-A8F5-41E909718FBA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:srv1m_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4B29E7F-8BFE-466A-B357-63F8A2160C4E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:srv1m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6D55CC7D-2E65-4CA9-9892-B6FBCC087E6F"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "product-security@qualcomm.com"
}