CVE-2025-47372: Buffer Copy Without Checking Size of Input in Boot
Published Dec 1, 2025
·Updated
Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.
Affected Software
47 affected components
Google Android
All of the following
Qualcomm Qam8255p Firmware
Qualcomm Qam8255p
All of the following
Qualcomm Qam8620p Firmware
Qualcomm Qam8620p
All of the following
Qualcomm Qam8650p Firmware
Qualcomm Qam8650p
All of the following
Qualcomm Qam8775p Firmware
Qualcomm Qam8775p
All of the following
Qualcomm Qamsrv1h Firmware
Qualcomm Qamsrv1h
All of the following
Qualcomm Qamsrv1m Firmware
Qualcomm Qamsrv1m
All of the following
Qualcomm Qca6595 Firmware
Qualcomm Qca6595
All of the following
Qualcomm Qca6595au Firmware
Qualcomm Qca6595au
All of the following
Qualcomm Qca6678aq Firmware
Qualcomm Qca6678aq
All of the following
Qualcomm Qca6696 Firmware
Qualcomm Qca6696
All of the following
Qualcomm Qca6698aq Firmware
Qualcomm Qca6698aq
All of the following
Qualcomm Qca6797aq Firmware
Qualcomm Qca6797aq
All of the following
Qualcomm Sa7255p Firmware
Qualcomm Sa7255p
All of the following
Qualcomm Sa7775p Firmware
Qualcomm Sa7775p
All of the following
Qualcomm Sa8255p Firmware
Qualcomm Sa8255p
All of the following
Qualcomm Sa8620p Firmware
Qualcomm Sa8620p
All of the following
Qualcomm Sa8650p Firmware
Qualcomm Sa8650p
All of the following
Qualcomm Sa8770p Firmware
Qualcomm Sa8770p
All of the following
Qualcomm Sa8775p Firmware
Qualcomm Sa8775p
All of the following
Qualcomm Sa9000p Firmware
Qualcomm Sa9000p
All of the following
Qualcomm Srv1h Firmware
Qualcomm Srv1h
All of the following
Qualcomm Srv1l Firmware
Qualcomm Srv1l
All of the following
Qualcomm Srv1m Firmware
Qualcomm Srv1m
Event History
Dec 1, 2025
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
Affected Software
Dec 2, 2025
News Published
via BleepingComputer·02:36 PM
News Published
via BleepingComputer·02:38 PM
News Published
via The Register·06:47 PM
News Published
via The Register·06:52 PM
Dec 18, 2025
CVE Published
via MITRE·05:29 AM
Data Sourced
via MITRE·05:29 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-47372?
CVE-2025-47372 is rated as high severity due to its potential for memory corruption leading to system vulnerabilities.
2
How do I fix CVE-2025-47372?
To fix CVE-2025-47372, update your device to the latest version of the Android operating system that contains security patches addressing this vulnerability.
3
What types of systems are affected by CVE-2025-47372?
CVE-2025-47372 affects Google Android devices that process corrupted ELF images.
4
What happens if CVE-2025-47372 is exploited?
Exploiting CVE-2025-47372 can lead to unauthorized access and potential system crashes due to memory corruption.
5
Is there a workaround for CVE-2025-47372?
Currently, the best practice is to update your Android device as there are no official workarounds available for CVE-2025-47372.