Untrusted Pointer Dereference in TZ Firmware (Qualcomm, Inc. Snapdragon)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.08 % · percentile 0 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- qualcomm
- NVD status
- Analyzed
Description
Information disclosure while processing system calls with invalid parameters.
Weaknesses (CWE)
- CWE-822 — Untrusted Pointer Dereference
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N | qualcomm |
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N | NVD · product-security@qualcomm.com (Secondary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2025-204027
- GCVE · GCVE-0-2025-47325
Affected configurations (NVD CPE)
cpe:2.3:o:qualcomm:qcn5022_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn5024_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn5052_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn5054_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn5064_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn5122_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn5124_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn5152_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn5154_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn5164_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn5550_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn6023_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn9000_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn9022_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn9070_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn9072_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qca9889_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qca9888_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qca8075_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qca8072_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qca6438_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qca6428_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:qca4024_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:pmp8074_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:ipq8174_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:ipq8173_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:ipq8078a_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:ipq8078_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:ipq8076a_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:ipq8076_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:ipq8074a_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:ipq8072a_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:ipq8072_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:qualcomm:ipq8071a_firmware:-:*:*:*:*:*:*:*- +4 more
Affected products
| Product | Versions |
|---|---|
| Qualcomm, Inc. · Snapdragon | affected CSR8811 ; affected IPQ8070 ; affected IPQ8070A ; affected IPQ8071 ; affected IPQ8071A ; affected IPQ8072 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |