Threats Tagged 'cve-2025-47342'

CVE-2025-47342 is a high-severity use-after-free vulnerability (CWE-416) affecting multiple Qualcomm Snapdragon audio platforms, including QCC5161, QCC7225, QCC7226, QCC7228, and various S3 and S5 Sound Platforms. The flaw arises when multi-profile concurrency is enabled with Qualcomm High-Speed (QHS) mode active, potentially causing a transient denial-of-service (DoS) condition. Exploitation requires network-level access with low privileges but no user interaction, and it can result in loss of availability due to improper memory handling. No known exploits are currently reported in the wild, and no patches have been published yet. European organizations using affected Snapdragon audio chipsets in their devices may experience service interruptions or degraded audio functionality. Mitigation involves closely monitoring vendor advisories for patches, limiting network exposure of affected devices, and disabling multi-profile concurrency or QHS mode where feasible. Countries with significant consumer electronics manufacturing and high adoption of Qualcomm Snapdragon-based devices, such as Germany, France, and the UK, are most likely to be impacted. Given the potential for denial-of-service and ease of exploitation, this vulnerability is rated as high severity and requires prompt attention from security teams managing affected hardware.

HighVulnerabilityGermanyFranceItaly+4#cve#cve-2025-47342#cwe-416