Buffer over-read in Qualcomm products - CVE-2025-47318

Vulnerability identifier: #VU114647

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-47318

CWE-ID: CWE-126

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation in BT Controller. A remote attacker can perform a denial of service (DoS) attack.

Snapdragon 8 Gen 2 Mobile Platform
SG8275
SG8275P
SM7325P
SM8550P
SM8750
SM8750P
Smart Audio 400 Platform
Snapdragon 778G 5G Mobile Platform
Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)
Snapdragon 782G Mobile Platform (SM7325-AF)
Snapdragon 7c+ Gen 3 Compute
Snapdragon 8 Gen 1 Mobile Platform
SDX61
Snapdragon 8+ Gen 2 Mobile Platform
Snapdragon 820 Automotive Platform
Snapdragon 865 5G Mobile Platform
Snapdragon 865+ 5G Mobile Platform (SM8250-AB)
Snapdragon 870 5G Mobile Platform (SM8250-AC)
Snapdragon 888 5G Mobile Platform
Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite"
Snapdragon 8cx Compute Platform (SC8180X-AA
Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC
Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB
Snapdragon AR1 Gen 1 Platform
SA8155P
S5 Sound Platform
SA4150P
SA4155P
SA6145P
SA6150P
SA6155
SA7255P
SA7775P
SA8145P
SA8150P
SA8155
Snapdragon AR1 Gen 1 Platform "Luna1"
SA8195P
SA8255P
SA8295P
SA8650P
SA8770P
SA8775P
SD 8 Gen1 5G
SD865 5G
WCN7880
WCD9360
WCD9370
WCD9375
WCD9380
WCD9385
WCD9390
WCD9395
WCN3950
WCN3980
WCN6740
WCN7860
WCN7861
WCD9341
WCN7881
WSA8810
WSA8815
WSA8830
WSA8835
WSA8840
WSA8845
WSA8845H
Snapdragon 8cx Compute Platform (SC8180X-AB)
Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AF)
Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-BB)
SRV1H
Snapdragon AR2 Gen 1 Platform
Snapdragon Auto 5G Modem-RF
Snapdragon Auto 5G Modem-RF Gen 2
Snapdragon W5+ Gen 1 Wearable Platform
Snapdragon X5 LTE Modem
Snapdragon X55 5G Modem-RF System
Snapdragon X65 5G Modem-RF System
Snapdragon X72 5G Modem-RF System
Snapdragon X75 5G Modem-RF System
Snapdragon XR2 5G Platform
Snapdragon XR2+ Gen 1 Platform
Snapdragon Auto 4G Modem
S5 Gen 2 Sound Platform
SRV1M
SSG2115P
SSG2125P
SW5100
SW5100P
SXR1230P
SXR2230P
SXR2250P
WCD9326
WCD9335
WCD9340
QCA6430
QAM8650P
QAM8775P
QAMSRV1H
QAMSRV1M
QCA1062
QCA1064
QCA2066
QCA4024
QCA6175A
QCA6391
QCA6420
QAM8295P
QCA6554A
QCA6564A
QCA6564AU
QCA6574
QCA6574A
QCA6584
QCA6584AU
QCA6595
QCA6595AU
QCA6678AQ
QCA6688AQ
Flight RB5 5G Platform
APQ8064AU
AQT1000
AR8031
AR8035
CSRA6620
CSRA6640
CSRB31024
FastConnect 6200
FastConnect 6700
FastConnect 6800
FastConnect 6900
FastConnect 7800
QCA6696
Home Hub 100 Platform
Immersive Home 214 Platform
Immersive Home 216 Platform
Immersive Home 316 Platform
Immersive Home 318 Platform
IPQ5010
IPQ5028
MDM9628
QAM8255P
QCS6125
QCN9001
QCN9002
QCN9003
QCN9011
QCN9012
QCN9022
QCN9024
QCN9070
QCN9072
QCN9074
QCN9100
QCN9274
QCN9000
QCS7230
QCS8250
QFW7114
QFW7124
QRB5165M
QRB5165N
Qualcommr Video Collaboration VC1 Platform
Qualcommr Video Collaboration VC5 Platform
Robotics RB5 Platform
S3 Gen 2 Sound Platform
S3 Sound Platform
QCM6125
QCA6698AQ
QCA6797AQ
QCA8081
QCA8337
QCC2073
QCC2076
QCC5161
QCC710
QCC711
QCC7225
QCC7226
QCC7228
QCN6023
QCN6024
QCN6100
QCN6102
QCN6112
QCN6122
QCN6224
QCN6274
QCN7606
SA6155P
SA8620P
SA9000P
SDX55
WSA8832
QCA6174A
QCA6574AU
MDM9640
MSM8996AU
APQ8017
QCN6132
QCN7605
Google Android

Install security update from vendor's website.

Google Android - addressed in versions 13 2025-09-05, 14 2025-09-05, 15 2025-09-05, 16 2025-09-05

• https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html

• Multiple vulnerabilities in Qualcomm chipsets (September 2025)
• Multiple vulnerabilities in Google Android