CVE-2025-47342 - Vulnerability Details - OpenCVE

ReportizFlow

Transient DOS may occur when multi-profile concurrency arises with QHS enabled.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Qualcomm	Snapdragon

No data.

No data.

References

Link	Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html

History

Thu, 09 Oct 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 09 Oct 2025 13:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Qualcomm Qualcomm snapdragon
Vendors & Products		Qualcomm Qualcomm snapdragon

Thu, 09 Oct 2025 03:30:00 +0000

Type	Values Removed	Values Added
Description		Transient DOS may occur when multi-profile concurrency arises with QHS enabled.
Title		Use After Free in BT Controller
Weaknesses		CWE-416
References		https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
Metrics		cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H'}`

MITRE

Status: PUBLISHED

Assigner: qualcomm

Published: 2025-10-09T03:18:10.744Z

Updated: 2025-10-09T16:07:32.297Z

Reserved: 2025-05-06T08:33:16.262Z

Link: CVE-2025-47342

Vulnrichment

Updated: 2025-10-09T16:07:27.632Z

NVD

Status : Awaiting Analysis

Published: 2025-10-09T04:16:46.393

Modified: 2025-10-09T15:50:04.013

Link: CVE-2025-47342

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-47342", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2025-05-06T08:33:16.262Z", "datePublished": "2025-10-09T03:18:10.744Z", "dateUpdated": "2025-10-09T16:07:32.297Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Voice & Music"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "QCC5161"}, {"status": "affected", "version": "QCC7225"}, {"status": "affected", "version": "QCC7226"}, {"status": "affected", "version": "QCC7228"}, {"status": "affected", "version": "S3 Gen 2 Sound Platform"}, {"status": "affected", "version": "S3 Sound Platform"}, {"status": "affected", "version": "S5 Gen 2 Sound Platform"}, {"status": "affected", "version": "S5 Sound Platform"}]}], "descriptions": [{"lang": "en", "value": "Transient DOS may occur when multi-profile concurrency arises with QHS enabled."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-416", "description": "CWE-416 Use After Free", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2025-10-09T03:18:10.744Z"}, "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html"}], "title": "Use After Free in BT Controller"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-09T16:07:20.705745Z", "id": "CVE-2025-47342", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-09T16:07:32.297Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-47342", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-09T16:07:20.705745Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-09T16:07:27.632Z"}}], "cna": {"title": "Use After Free in BT Controller", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Qualcomm, Inc.", "product": "Snapdragon", "versions": [{"status": "affected", "version": "QCC5161"}, {"status": "affected", "version": "QCC7225"}, {"status": "affected", "version": "QCC7226"}, {"status": "affected", "version": "QCC7228"}, {"status": "affected", "version": "S3 Gen 2 Sound Platform"}, {"status": "affected", "version": "S3 Sound Platform"}, {"status": "affected", "version": "S5 Gen 2 Sound Platform"}, {"status": "affected", "version": "S5 Sound Platform"}], "platforms": ["Snapdragon Voice & Music"], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html"}], "descriptions": [{"lang": "en", "value": "Transient DOS may occur when multi-profile concurrency arises with QHS enabled."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use After Free"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2025-10-09T03:18:10.744Z"}}}, "cveMetadata": {"cveId": "CVE-2025-47342", "state": "PUBLISHED", "dateUpdated": "2025-10-09T16:07:32.297Z", "dateReserved": "2025-05-06T08:33:16.262Z", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "datePublished": "2025-10-09T03:18:10.744Z", "assignerShortName": "qualcomm"}, "dataVersion": "5.1"}