Cyber Resilience

CVE-2025-47364

Medium

Published: 02 February 2026

Published
02 February 2026
Modified
11 February 2026
KEV Added
—
Patch
—
CVSS Score v3.1 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0001 0.7th percentile
Risk Priority 14 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-47364 is a medium-severity Integer Overflow or Wraparound (CWE-190) vulnerability in Qualcomm Qam8255P Firmware. Its CVSS base score is 6.8 (Medium).

Operationally, ranked at the 0.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).

Deeper analysis

CVE-2025-47364 is a memory corruption vulnerability caused by an integer overflow (CWE-190) during the calculation of an offset from the partition start point. It affects components within Qualcomm products, as documented in the vendor's security bulletin.

The vulnerability carries a CVSS v3.1 base score of 6.8 (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Attackers with physical access to an affected device can exploit it with low attack complexity, requiring no privileges or user interaction, potentially resulting in high impacts to confidentiality, integrity, and availability via memory corruption.

Mitigation details are provided in the Qualcomm February 2026 security bulletin, available at https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2026-bulletin.html.

EU & UK References

Vulnerability details

Memory corruption while calculating offset from partition start point.

CWE(s)
CWE-190

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

Insufficient information to map techniques.
Confidence: LOW · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-47363Same product: Qualcomm Qam8255P
CVE-2024-45555Same product: Qualcomm Qam8255P
CVE-2024-53028Same product: Qualcomm Qam8255P
CVE-2024-53030Same product: Qualcomm Qam8255P
CVE-2024-53032Same product: Qualcomm Qam8255P
CVE-2024-53029Same product: Qualcomm Qam8255P
CVE-2024-53031Same product: Qualcomm Qam8255P
CVE-2024-49837Same product: Qualcomm Qam8255P
CVE-2024-53012Same product: Qualcomm Qam8255P
CVE-2024-43064Same product: Qualcomm Qam8255P

Affected Assets

qualcomm
qam8255p firmware
all versions
qualcomm
qam8295p firmware
all versions
qualcomm
qam8620p firmware
all versions
qualcomm
qam8650p firmware
all versions
qualcomm
qam8775p firmware
all versions
qualcomm
qamsrv1h firmware
all versions
qualcomm
qamsrv1m firmware
all versions
qualcomm
qca6574au firmware
all versions
qualcomm
qca6595 firmware
all versions
qualcomm
qca6595au firmware
all versions
+25 more product configuration(s) — see NVD for full list

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SI-16 Memory Protection good match
prevent

Directly implements memory protections that block exploitation of the integer-overflow-induced memory corruption during partition offset calculation.

SI-10 Information Input Validation good match
prevent

Requires validation of inputs used in offset calculations, preventing the integer overflow (CWE-190) that leads to memory corruption.

SC-39 Process Isolation partial match
prevent

Maintains separate execution domains so memory corruption in the partition-handling component cannot freely affect other processes.

References