Cyber Resilience

CVE-2025-47385

Qualcomm Sa8295P Firmware

Published
02 March 2026
Modified
05 March 2026
Patch / advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.00069 0.0th percentile
Risk Priority 53 floored blend · peak EPSS

Summary

CVE-2025-47385 is a high-severity Improper Access Control for Register Interface (CWE-1262) vulnerability in Qualcomm Sa8295P Firmware. Its CVSS base score is 7.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Firmware Corruption (T1495); ranked at the 0.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to AC-3 (Access Enforcement) and AC-6 (Least Privilege) — see the control section below for these in your framework.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2025-47385 is a memory corruption vulnerability that arises when accessing the trusted execution environment without proper privilege checks. It affects components in Qualcomm products, as detailed in the vendor's March 2026 security bulletin. The issue carries a CVSS v3.1 base score of 7.8, with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, and is classified under CWE-1262. The vulnerability was published on 2026-03-02.

A local attacker with low privileges can exploit CVE-2025-47385 with low attack complexity and no user interaction. Exploitation enables high-impact consequences, including unauthorized access to confidential data, modification of system integrity, and disruption of availability through memory corruption in the trusted execution environment.

Qualcomm's security bulletin at https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2026-bulletin.html provides details on affected products, patches, and mitigation recommendations for addressing this vulnerability.

EU & UK References

Vulnerability Data

Memory Corruption when accessing trusted execution environment without proper privilege check.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise Techniques

T1495 Firmware Corruption Impact
Adversaries may overwrite or corrupt the flash memory contents of system BIOS or other firmware in devices attached to a system in order to render them inoperable or unable to boot, thus denying the availability to use the devices and/or…
T1542 Pre-OS Boot Stealth
Adversaries may abuse Pre-OS Boot mechanisms as a way to establish persistence on a system.
T1601 Modify System Image Defense Impairment
Adversaries may make changes to the operating system of embedded network devices to weaken defenses and provide new capabilities for themselves.
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2024-45556Same product: Qualcomm Fastconnect 6900
CVE-2025-59600Same product: Qualcomm Fastconnect 6200
CVE-2025-59606Same product: Qualcomm Fastconnect 6200
CVE-2024-38421Same product: Qualcomm Fastconnect 6200
CVE-2025-47389Same product: Qualcomm Fastconnect 6200
CVE-2025-47373Same product: Qualcomm Fastconnect 6200
CVE-2025-47391Same product: Qualcomm Fastconnect 6200
CVE-2026-24087Same product: Qualcomm Fastconnect 6200
CVE-2025-47378Same product: Qualcomm Fastconnect 6700
CVE-2026-24090Same product: Qualcomm Fastconnect 6200

Affected Assets

qualcomm
sa8295p firmware
all versions
qualcomm
sa8620p firmware
all versions
qualcomm
sa8770p firmware
all versions
qualcomm
sa9000p firmware
all versions
qualcomm
sar1165p firmware
all versions
qualcomm
sar1250p firmware
all versions
qualcomm
sar2230p firmware
all versions
qualcomm
sm7435 firmware
all versions
qualcomm
sm8750p firmware
all versions
qualcomm
snapdragon 4 gen 1 mobile platform firmware
all versions
+84 more product configuration(s) — see NVD for full list

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

Enforcing approved authorizations for logical access directly stops unauthorized software from reaching memory-mapped registers.

Least-privilege assignment restricts which processes may access hardware registers, reducing the chance of improper interface exposure.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.AA-05 mostly match
prevents

Defining, enforcing, and reviewing access permissions and least privilege directly addresses unauthorized register access.

PR.IR-01 partial match
prevents

Protecting environments from unauthorized logical access can prevent improper register-interface usage.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

finds

Security testing can discover improper register access but does not prevent it at runtime.

mitigates

Privileged utility programs may touch registers, so the control partially mitigates misuse.

prevents

Privileged access rights directly restrict who can read/write hardware registers.

prevents

Secure architecture principles require proper hardware register access controls by design.

prevents

Secure coding practices prevent unauthorized register access in firmware and drivers.

prevents

Information access restriction explicitly limits software access to memory-mapped register interfaces.

References