CVE-2025-47342: Use After Free in BT Controller
Published Oct 9, 2025
·Updated
Transient DOS may occur when multi-profile concurrency arises with QHS enabled.
Affected Software
16 affected components
All of the following
Qualcomm Qcc5161 Firmware
Qualcomm Qcc5161
All of the following
Qualcomm Qcc7225 Firmware
Qualcomm Qcc7225
All of the following
Qualcomm Qcc7226 Firmware
Qualcomm Qcc7226
All of the following
Qualcomm Qcc7228 Firmware
Qualcomm Qcc7228
All of the following
Qualcomm S3 Gen 2 Sound Platform Firmware
Qualcomm S3 Gen 2 Sound Platform
All of the following
Qualcomm S3 Sound Platform Firmware
Qualcomm S3 Sound Platform
All of the following
Qualcomm S5 Gen 2 Sound Platform Firmware
Qualcomm S5 Gen 2 Sound Platform
All of the following
Qualcomm S5 Sound Platform Firmware
Qualcomm S5 Sound Platform
Event History
Oct 9, 2025
CVE Published
via MITRE·03:18 AM
Data Sourced
via MITRE·03:18 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-47342?
CVE-2025-47342 is classified as a transient Denial of Service (DoS) vulnerability.
2
How do I fix CVE-2025-47342?
To address CVE-2025-47342, update the firmware on the affected Qualcomm devices to the latest version provided by the manufacturer.
3
Which Qualcomm devices are affected by CVE-2025-47342?
CVE-2025-47342 affects various Qualcomm firmware including Qcc5161, Qcc7225, Qcc7226, Qcc7228, S3 Gen 2 Sound Platform, S3 Sound Platform, S5 Gen 2 Sound Platform, and S5 Sound Platform.
4
What causes CVE-2025-47342?
CVE-2025-47342 may be triggered by multi-profile concurrency when QHS is enabled.
5
Is my Qualcomm device safe from CVE-2025-47342 if it is not using the affected firmware?
If your Qualcomm device is running a non-affected firmware version, it is not vulnerable to CVE-2025-47342.