Boot Process Compromised: Critical Flaw (CVE-2025-47372) Hits Snapdragon 8 Gen 3 & 5G Modems

Qualcomm has released a significant security update for December 2025, addressing 11 vulnerabilities in its chipset ecosystem, including a critical flaw (CVE-2025-47372) in the boot process that allows arbitrary code execution. This vulnerability, rated Critical with a CVSS score of 9.0, involves a buffer overflow due to improper size checking.

Other notable vulnerabilities include CVE-2025-47319, affecting the High-Level Operating System, and several high-severity issues in multimedia subsystems (audio, camera, video). Qualcomm urges OEMs to deploy patches to end-user devices immediately, covering a wide range of affected chipsets, including Snapdragon 8 Gen 3 and X75 5G Modem.