{"api_version":"1","generated_at":"2026-10-21T13:51:06+00:00","cve":"CVE-2025-47342","urls":{"html":"https://cve.report/CVE-2025-47342","api":"https://cve.report/api/cve/CVE-2025-47342.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2025-47342","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-47342"},"summary":{"title":"Use After Free in BT Controller","description":"Transient DOS may occur when multi-profile concurrency arises with QHS enabled.","state":"PUBLISHED","assigner":"qualcomm","published_at":"2025-10-09 04:16:46","updated_at":"2026-10-08 13:10:00"},"problem_types":["CWE-416","CWE-416 CWE-416 Use After Free"],"metrics":[{"version":"3.1","source":"product-security@qualcomm.com","type":"Secondary","score":"7.1","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"7.1","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","version":"3.1"}}],"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html","name":"https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html","refsource":"product-security@qualcomm.com","tags":["Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-47342","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47342","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Qualcomm, Inc.","product":"Snapdragon","version":"affected QCC5161","platforms":["Snapdragon Voice & Music"]},{"source":"CNA","vendor":"Qualcomm, Inc.","product":"Snapdragon","version":"affected QCC7225","platforms":["Snapdragon Voice & Music"]},{"source":"CNA","vendor":"Qualcomm, Inc.","product":"Snapdragon","version":"affected QCC7226","platforms":["Snapdragon Voice & Music"]},{"source":"CNA","vendor":"Qualcomm, Inc.","product":"Snapdragon","version":"affected QCC7228","platforms":["Snapdragon Voice & Music"]},{"source":"CNA","vendor":"Qualcomm, Inc.","product":"Snapdragon","version":"affected S3 Gen 2 Sound Platform","platforms":["Snapdragon Voice & Music"]},{"source":"CNA","vendor":"Qualcomm, Inc.","product":"Snapdragon","version":"affected S3 Sound Platform","platforms":["Snapdragon Voice & Music"]},{"source":"CNA","vendor":"Qualcomm, Inc.","product":"Snapdragon","version":"affected S5 Gen 2 Sound Platform","platforms":["Snapdragon Voice & Music"]},{"source":"CNA","vendor":"Qualcomm, Inc.","product":"Snapdragon","version":"affected S5 Sound Platform","platforms":["Snapdragon Voice & Music"]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2025","cve_id":"47342","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"qualcomm","cpe5":"qcc5161","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"qualcomm","cpe5":"qcc5161_firmware","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"qualcomm","cpe5":"qcc7225","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"qualcomm","cpe5":"qcc7225_firmware","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"qualcomm","cpe5":"qcc7226","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"qualcomm","cpe5":"qcc7226_firmware","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"qualcomm","cpe5":"qcc7228","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"qualcomm","cpe5":"qcc7228_firmware","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"qualcomm","cpe5":"s3_gen_2_sound_platform","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"qualcomm","cpe5":"s3_gen_2_sound_platform_firmware","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"qualcomm","cpe5":"s3_sound_platform","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"qualcomm","cpe5":"s3_sound_platform_firmware","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"qualcomm","cpe5":"s5_gen_2_sound_platform","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"qualcomm","cpe5":"s5_gen_2_sound_platform_firmware","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"qualcomm","cpe5":"s5_sound_platform","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"47342","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"qualcomm","cpe5":"s5_sound_platform_firmware","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2025","cve_id":"47342","cve":"CVE-2025-47342","epss":"0.001650000","percentile":"0.051830000","score_date":"2026-10-08","updated_at":"2026-10-09 00:01:24"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2025-47342","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-10-09T16:07:20.705745Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2025-10-09T16:07:32.297Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","platforms":["Snapdragon Voice & Music"],"product":"Snapdragon","vendor":"Qualcomm, Inc.","versions":[{"status":"affected","version":"QCC5161"},{"status":"affected","version":"QCC7225"},{"status":"affected","version":"QCC7226"},{"status":"affected","version":"QCC7228"},{"status":"affected","version":"S3 Gen 2 Sound Platform"},{"status":"affected","version":"S3 Sound Platform"},{"status":"affected","version":"S5 Gen 2 Sound Platform"},{"status":"affected","version":"S5 Sound Platform"}]}],"descriptions":[{"lang":"en","value":"Transient DOS may occur when multi-profile concurrency arises with QHS enabled."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-416","description":"CWE-416 Use After Free","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-09T03:18:10.744Z","orgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f","shortName":"qualcomm"},"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html"}],"title":"Use After Free in BT Controller"}},"cveMetadata":{"assignerOrgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f","assignerShortName":"qualcomm","cveId":"CVE-2025-47342","datePublished":"2025-10-09T03:18:10.744Z","dateReserved":"2025-05-06T08:33:16.262Z","dateUpdated":"2025-10-09T16:07:32.297Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2025-10-09 04:16:46","lastModifiedDate":"2026-10-08 13:10:00","problem_types":["CWE-416","CWE-416 CWE-416 Use After Free"],"metrics":{"cvssMetricV31":[{"source":"product-security@qualcomm.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-09T16:07:20.705745Z","id":"CVE-2025-47342","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qualcomm:qcc5161_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"E46C3967-D2BE-424F-95B8-A3689677AE57"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:qualcomm:qcc5161:-:*:*:*:*:*:*:*","matchCriteriaId":"73C21D3B-E8E4-4384-9F80-B448A90AB1EC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qualcomm:qcc7225_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7553D09E-E6F3-46C4-9FE0-750CFB7D0CA6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:qualcomm:qcc7225:-:*:*:*:*:*:*:*","matchCriteriaId":"EBACEC44-6028-438A-8375-8EEBAD3B16C8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qualcomm:qcc7226_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"CF65E4DE-F031-4611-A9F8-80E633B50F70"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:qualcomm:qcc7226:-:*:*:*:*:*:*:*","matchCriteriaId":"D4B3DDE7-D13F-4DE3-B2DD-986B0BF07C7E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qualcomm:qcc7228_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"96822D1A-40C7-4FF8-B00D-1FE59B21FB8D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:qualcomm:qcc7228:-:*:*:*:*:*:*:*","matchCriteriaId":"2B4D966B-7F0B-46A2-9967-75231F15B113"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qualcomm:s3_gen_2_sound_platform_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"8170481D-548A-4D15-A083-48FE1901F0C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:qualcomm:s3_gen_2_sound_platform:-:*:*:*:*:*:*:*","matchCriteriaId":"898088E3-56FD-4E5A-A26C-4FC073475BC2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qualcomm:s3_sound_platform_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D506D526-9141-45EB-BB2F-07ED3696AF90"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:qualcomm:s3_sound_platform:-:*:*:*:*:*:*:*","matchCriteriaId":"37B3BAEA-4432-4081-A450-B6F02A65FAF5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qualcomm:s5_gen_2_sound_platform_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"63F7C9DF-2C1C-454D-9A4A-1953ACA05FAD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:qualcomm:s5_gen_2_sound_platform:-:*:*:*:*:*:*:*","matchCriteriaId":"0FF12649-B9DC-49A1-BD2A-C298B33B3F87"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qualcomm:s5_sound_platform_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7BD2CF5B-DAD6-49FB-9919-C4336733A6A3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:qualcomm:s5_sound_platform:-:*:*:*:*:*:*:*","matchCriteriaId":"05153F92-EC0E-4FD1-95FF-DCD1BB4D868A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2025","CveId":"47342","Ordinal":"1","Title":"Use After Free in BT Controller","CVE":"CVE-2025-47342","Year":"2025"},"notes":[{"CveYear":"2025","CveId":"47342","Ordinal":"1","NoteData":"Transient DOS may occur when multi-profile concurrency arises with QHS enabled.","Type":"Description","Title":"Use After Free in BT Controller"}]}}}