CVE-2025-47364
Published: 02 February 2026
Summary
CVE-2025-47364 is a medium-severity Integer Overflow or Wraparound (CWE-190) vulnerability in Qualcomm Qam8255P Firmware. Its CVSS base score is 6.8 (Medium).
Operationally, ranked at the 0.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
Threat & Defense Details
MITRE ATT&CK Enterprise TechniquesAI
Insufficient information to map techniques.NVD Description
Memory corruption while calculating offset from partition start point.
Deeper analysisAI
CVE-2025-47364 is a memory corruption vulnerability caused by an integer overflow (CWE-190) during the calculation of an offset from the partition start point. It affects components within Qualcomm products, as documented in the vendor's security bulletin.
The vulnerability carries a CVSS v3.1 base score of 6.8 (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Attackers with physical access to an affected device can exploit it with low attack complexity, requiring no privileges or user interaction, potentially resulting in high impacts to confidentiality, integrity, and availability via memory corruption.
Mitigation details are provided in the Qualcomm February 2026 security bulletin, available at https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2026-bulletin.html.
Details
- CWE(s)