CVE-2025-47346 Qualcomm, Inc. CVE debrief

Who should care

Qualcomm product security teams, administrators, and users of affected products should assess exposure and prioritize mitigation. This includes reviewing secure logging command processing in trusted applications for potential memory corruption issues, verifying inventory for affected products and checking for vendor advisories, implementing compensating controls to monitor and limit interactions with trusted

Why it matters

CVE-2025-47346 is a high-severity memory corruption vulnerability in Qualcomm products. Defenders should prioritize reviewing secure logging command processing in trusted applications, verifying inventory, and implementing compensating controls. Specific affected versions and exploitation details require verification from official sources.

• Memory corruption could lead to system crashes or instability
• Potential for elevation of privileges or unauthorized access
• Compromise of sensitive data or system integrity
• Need for verification of affected versions and patch application

Technical summary

The CVE-2025-47346 vulnerability involves memory corruption while processing a secure logging command in a trusted application. The vulnerability has a CVSS score of 7.8 and is classified as HIGH severity. Multiple Qualcomm products are potentially affected, including various chipsets and platforms.

Defensive priority

Qualcomm product security teams and administrators should prioritize reviewing secure logging command processing in trusted applications for potential memory corruption issues.

Recommended defensive actions

• Review and assess exposure of Qualcomm products to memory corruption via secure logging commands
• Verify inventory for affected products and check for vendor advisories
• Implement compensating controls to monitor and limit interactions with trusted applications
• Monitor for and respond to potential memory corruption incidents

Evidence notes

The CVE and NVD records provide limited information about the vulnerability, which involves memory corruption while processing a secure logging command in a trusted application. Specific affected versions and exploitation details are not provided in the supplied sources.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.