CVE-2025-47325

Untrusted Pointer Dereference in TZ Firmware

State: Published
Severity: 6.5 Medium
Published: Dec 18, 2025
Updated: Dec 18, 2025
Reserved: May 6, 2025

Description

Information disclosure while processing system calls with invalid parameters.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N	qualcomm

Weaknesses

CWE-822 Untrusted Pointer Dereference

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	CSR8811Affected IPQ8070Affected IPQ8070AAffected IPQ8071Affected IPQ8071AAffected IPQ8072Affected IPQ8072AAffected IPQ8074Affected IPQ8074AAffected IPQ8076Affected IPQ8076AAffected IPQ8078Affected IPQ8078AAffected IPQ8173Affected IPQ8174Affected PMP8074Affected QCA4024Affected QCA6428Affected QCA6438Affected QCA8072Affected QCA8075Affected QCA8081Affected QCA9888Affected QCA9889Affected QCN5022Affected and 19 more versions

Product

Versions

SnapdragonQualcomm, Inc.

CSR8811Affected
IPQ8070Affected
IPQ8070AAffected
IPQ8071Affected
IPQ8071AAffected
IPQ8072Affected
IPQ8072AAffected
IPQ8074Affected
IPQ8074AAffected
IPQ8076Affected
IPQ8076AAffected
IPQ8078Affected
IPQ8078AAffected
IPQ8173Affected
IPQ8174Affected
PMP8074Affected
QCA4024Affected
QCA6428Affected
QCA6438Affected
QCA8072Affected
QCA8075Affected
QCA8081Affected
QCA9888Affected
QCA9889Affected
QCN5022Affected
and 19 more versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.