CVE-2025-47357: Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

CVE-2025-47357 · Severity: high · CVSS 8 · Published 2025-11-04

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

Technologies: Qualcomm Qam8255p, Qualcomm Qam8255p Firmware, Qualcomm Qam8620p, Qualcomm Qam8620p Firmware, Qualcomm Qam8650p, Qualcomm Qam8650p Firmware, Qualcomm Qam8775p, Qualcomm Qam8775p Firmware, Qualcomm Qamsrv1h, Qualcomm Qamsrv1h Firmware, Qualcomm Qamsrv1m, Qualcomm Qamsrv1m Firmware, Qualcomm Qca6595, Qualcomm Qca6595 Firmware, Qualcomm Qca6595au, Qualcomm Qca6595au Firmware, Qualcomm Qca6678aq, Qualcomm Qca6678aq Firmware, Qualcomm Qca6696, Qualcomm Qca6696 Firmware, Qualcomm Qca6698aq, Qualcomm Qca6698aq Firmware, Qualcomm Qca6797aq, Qualcomm Qca6797aq Firmware, Qualcomm Sa7255p, Qualcomm Sa7255p Firmware, Qualcomm Sa7775p, Qualcomm Sa7775p Firmware, Qualcomm Sa8255p, Qualcomm Sa8255p Firmware, Qualcomm Sa8620p, Qualcomm Sa8620p Firmware, Qualcomm Sa8650p, Qualcomm Sa8650p Firmware, Qualcomm Sa8770p, Qualcomm Sa8770p Firmware, Qualcomm Sa8775p, Qualcomm Sa8775p Firmware, Qualcomm Sa9000p, Qualcomm Sa9000p Firmware, Qualcomm Srv1h, Qualcomm Srv1h Firmware, Qualcomm Srv1l, Qualcomm Srv1l Firmware, Qualcomm Srv1m, Qualcomm Srv1m Firmware. Vendors: Qualcomm.

Quick answers

Is CVE-2025-47357 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2025-47357 being exploited in the wild.
How severe is CVE-2025-47357?
High severity, with a CVSS score of 8, published 4 November 2025.
Which products and versions are affected?
Qualcomm Qam8255p, Qualcomm Qam8255p Firmware, Qualcomm Qam8620p, Qualcomm Qam8620p Firmware and 44 more. The advisory does not name versions.
Is there a fix for CVE-2025-47357?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
Am I affected by CVE-2025-47357?
Check whether you run Qualcomm Qam8255p, Qualcomm Qam8255p Firmware, Qualcomm Qam8620p or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Affected products

  • Qualcomm Qam8255p
  • Qualcomm Qam8255p Firmware
  • Qualcomm Qam8620p
  • Qualcomm Qam8620p Firmware
  • Qualcomm Qam8650p
  • Qualcomm Qam8650p Firmware
  • Qualcomm Qam8775p
  • Qualcomm Qam8775p Firmware
  • Qualcomm Qamsrv1h
  • Qualcomm Qamsrv1h Firmware
  • Qualcomm Qamsrv1m
  • Qualcomm Qamsrv1m Firmware
  • Qualcomm Qca6595
  • Qualcomm Qca6595 Firmware
  • Qualcomm Qca6595au
  • Qualcomm Qca6595au Firmware
  • Qualcomm Qca6678aq
  • Qualcomm Qca6678aq Firmware
  • Qualcomm Qca6696
  • Qualcomm Qca6696 Firmware
  • Qualcomm Qca6698aq
  • Qualcomm Qca6698aq Firmware
  • Qualcomm Qca6797aq
  • Qualcomm Qca6797aq Firmware
  • Qualcomm Qcs9100
  • Qualcomm Qcs9100 Firmware
  • Qualcomm Sa7255p
  • Qualcomm Sa7255p Firmware
  • Qualcomm Sa7775p
  • Qualcomm Sa7775p Firmware
  • Qualcomm Sa8255p
  • Qualcomm Sa8255p Firmware
  • Qualcomm Sa8620p
  • Qualcomm Sa8620p Firmware
  • Qualcomm Sa8650p
  • Qualcomm Sa8650p Firmware
  • Qualcomm Sa8770p
  • Qualcomm Sa8770p Firmware
  • Qualcomm Sa8775p
  • Qualcomm Sa8775p Firmware
  • Qualcomm Sa9000p
  • Qualcomm Sa9000p Firmware
  • Qualcomm Srv1h
  • Qualcomm Srv1h Firmware
  • Qualcomm Srv1l
  • Qualcomm Srv1l Firmware
  • Qualcomm Srv1m
  • Qualcomm Srv1m Firmware

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.