CVE-2025-47383 Missing Cryptographic Step in Data Modem
A missing cryptographic step in Qualcomm Snapdragon modems allows attackers to compromise VoWiFi call security, potentially exposing data or bypassing protections.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-47383?
CVE-2025-47383 is a high-severity vulnerability in Qualcomm Apq8098 Firmware, published on 2 Mar 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
Weakness: CWE-325
Which versions are affected by CVE-2025-47383?
It affects 206 products.
Products include Qualcomm 5g Fixed Wireless Access Platform Firmware, Qualcomm 9206 Lte Modem Firmware, Qualcomm 9207 Lte Modem Firmware, Qualcomm Apq8098 Firmware, Qualcomm Aqt1000 Firmware, Qualcomm Ar8035 Firmware and 200 more.
How do I fix CVE-2025-47383?
No fix has been published for CVE-2025-47383 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-47383 being exploited?
There is no known exploitation of CVE-2025-47383 in the wild and no public exploit code.
Other vulnerabilities in Qualcomm Apq8098 Firmware
Sources
Also known as GHSA-mrhm-mr9g-wpx6.