Vulnerability · Published Mar 2, 2026 · Assigned by qualcomm

CVE-2025-47383Missing Cryptographic Step in Data Modem

High 7.2

In plain English

A high-severity security flaw in Snapdragon from Qualcomm, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).

Severity (CVSS 3.1)7.2High
Exploit odds (30 days)0.1%top 96.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

Affected products (as reported)

VendorProductVersions
Qualcomm, Inc. Snapdragon 5G Fixed Wireless Access Platform9206 LTE Modem9207 LTE ModemAPQ8098AQT1000AR8035C-V2X 9150CSRA6620

Weakness: CWE-325 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References