Integer overflow in Qualcomm products - CVE-2025-47351
Published: December 2, 2025
Vulnerability identifier: #VU119013
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-47351
CWE-ID: CWE-190
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local application to execute arbitrary code.
The vulnerability exists due to improper input validation in DSP Service. A local application can execute arbitrary code.
Affected software
WCN3950
WSA8845H
WSA8845
WSA8840
WSA8835
WSA8830
WSA8815
WSA8810
WCN7881
WCN7880
WCN7861
WCN7860
WCN3988
FastConnect 6200
WCD9395
WCD9385
WCD9375
WCD9370
SM8850P
SM8850
SM8750P
SM8750
SG6150P
SG6150
FastConnect 7800
FastConnect 6900
FastConnect 6700
WSA8832
WSA8845H
WSA8845
WSA8840
WSA8835
WSA8830
WSA8815
WSA8810
WCN7881
WCN7880
WCN7861
WCN7860
WCN3988
FastConnect 6200
WCD9395
WCD9385
WCD9375
WCD9370
SM8850P
SM8850
SM8750P
SM8750
SG6150P
SG6150
FastConnect 7800
FastConnect 6900
FastConnect 6700
WSA8832
How to mitigate CVE-2025-47351
Install security update from vendor's website.