CVE-2024-53025 Integer Overflow or Wraparound in BT Controller

Medium 5.5 Published 3 Mar 2025 Updated 3 Mar 2025

An integer overflow in the Bluetooth controller allows attackers to cause a transient denial of service via UCI commands.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-53025?

CVE-2024-53025 is a medium-severity vulnerability in Qualcomm Fastconnect 7800 Firmware, published on 3 Mar 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Transient DOS can occur while processing UCI command.

Weakness: CWE-190

Which versions are affected by CVE-2024-53025?

It affects 18 products.

Products include Qualcomm Fastconnect 7800 Firmware, Qualcomm Sm8750 Firmware, Qualcomm Sm8750p Firmware, Qualcomm Snapdragon 8 Gen 3 Firmware, Qualcomm Wcd9390 Firmware, Qualcomm Wcd9395 Firmware and 12 more.

How do I fix CVE-2024-53025?

No fix has been published for CVE-2024-53025 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-53025 being exploited?

There is no known exploitation of CVE-2024-53025 in the wild and no public exploit code.

All Qualcomm Fastconnect 7800 Firmware vulnerabilities

Sources

Also known as GHSA-6grj-mxj6-346g.