Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
LTE UE crashes when receiving malformed LTE data packet
CVE-2025-47371
Summary
A potential denial-of-service (DOS) vulnerability exists in LTE-enabled devices. If an attacker sends a malicious LTE packet, it can cause the device to freeze or crash. Users should update their LTE-enabled devices to the latest software version to prevent this issue.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| qualcomm | 5g_fixed_wireless_access_platform_firmware | All versions | – |
| qualcomm | ar8035_firmware | All versions | – |
| qualcomm | csra6620_firmware | All versions | – |
| qualcomm | csra6640_firmware | All versions | – |
| qualcomm | fastconnect_6200_firmware | All versions | – |
| qualcomm | fastconnect_6700_firmware | All versions | – |
| qualcomm | fastconnect_6800_firmware | All versions | – |
| qualcomm | fastconnect_6900_firmware | All versions | – |
| qualcomm | fastconnect_7800_firmware | All versions | – |
| qualcomm | fwa_gen_3_ultra_firmware | All versions | – |
| qualcomm | g1_gen_1_firmware | All versions | – |
| qualcomm | milos_firmware | All versions | – |
| qualcomm | netrani_firmware | All versions | – |
| qualcomm | orne_firmware | All versions | – |
| qualcomm | palawan25_firmware | All versions | – |
| qualcomm | qca6174a_firmware | All versions | – |
| qualcomm | qca6391_firmware | All versions | – |
| qualcomm | qca6574a_firmware | All versions | – |
| qualcomm | qca6574au_firmware | All versions | – |
| qualcomm | qca6584au_firmware | All versions | – |
| qualcomm | qca6595au_firmware | All versions | – |
| qualcomm | qca6678aq_firmware | All versions | – |
| qualcomm | qca6688aq_firmware | All versions | – |
| qualcomm | qca6696_firmware | All versions | – |
| qualcomm | qca6698aq_firmware | All versions | – |
| qualcomm | qca6698au_firmware | All versions | – |
| qualcomm | qca6797aq_firmware | All versions | – |
| qualcomm | qca8081_firmware | All versions | – |
| qualcomm | qca8337_firmware | All versions | – |
| qualcomm | qcc710_firmware | All versions | – |
| qualcomm | qcm2290_firmware | All versions | – |
| qualcomm | qcm4325_firmware | All versions | – |
| qualcomm | qcm4490_firmware | All versions | – |
| qualcomm | qcn6024_firmware | All versions | – |
| qualcomm | qcn6224_firmware | All versions | – |
| qualcomm | qcn6274_firmware | All versions | – |
| qualcomm | qcn9011_firmware | All versions | – |
| qualcomm | qcn9012_firmware | All versions | – |
| qualcomm | qcn9024_firmware | All versions | – |
| qualcomm | qcs2290_firmware | All versions | – |
| qualcomm | qcs4290_firmware | All versions | – |
| qualcomm | qcs4490_firmware | All versions | – |
| qualcomm | qcs8550_firmware | All versions | – |
| qualcomm | qfw7114_firmware | All versions | – |
| qualcomm | qfw7124_firmware | All versions | – |
| qualcomm | qmp1000_firmware | All versions | – |
| qualcomm | robotics_rb2_platform_firmware | All versions | – |
| qualcomm | snapdragon_8_gen_1_firmware | All versions | – |
| qualcomm | sd662_firmware | All versions | – |
| qualcomm | sdx61_firmware | All versions | – |
| qualcomm | sdx71m_firmware | All versions | – |
| qualcomm | sm6225p_firmware | All versions | – |
| qualcomm | sm6250_firmware | All versions | – |
| qualcomm | sm6650p_firmware | All versions | – |
| qualcomm | sm7435_firmware | All versions | – |
| qualcomm | sm7550_firmware | All versions | – |
| qualcomm | sm7550p_firmware | All versions | – |
| qualcomm | sm7635p_firmware | All versions | – |
| qualcomm | sm7675_firmware | All versions | – |
| qualcomm | sm7675p_firmware | All versions | – |
| qualcomm | sm8475p_firmware | All versions | – |
| qualcomm | sm8550p_firmware | All versions | – |
| qualcomm | sm8635_firmware | All versions | – |
| qualcomm | sm8635p_firmware | All versions | – |
| qualcomm | sm8650q_firmware | All versions | – |
| qualcomm | sm8750p_firmware | All versions | – |
| qualcomm | snapdragon_4_gen_2_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_460_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_6_gen_1_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_6_gen_3_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_6_gen_4_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_662_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_680_4g_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_685_4g_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_690_5g_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_7_gen_1_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_7\+_gen_2_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_7c_compute_platform_firmware | All versions | – |
| qualcomm | snapdragon_7c_gen_2_compute_platform_firmware | All versions | – |
| qualcomm | snapdragon_7s_gen_3_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_8_elite_firmware | All versions | – |
| qualcomm | snapdragon_8_gen_1_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_8_gen_2_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_8_gen_3_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_8\+_gen_1_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_8\+_gen_2_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_865_5g_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_865\+_5g_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_870_5g_mobile_platform_firmware | All versions | – |
| qualcomm | snapdragon_auto_5g_modem-rf_firmware | All versions | – |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2_firmware | All versions | – |
| qualcomm | snapdragon_x55_5g_modem-rf_system_firmware | All versions | – |
| qualcomm | snapdragon_x65_5g_modem-rf_system_firmware | All versions | – |
| qualcomm | snapdragon_x72_5g_modem-rf_system_firmware | All versions | – |
| qualcomm | snapdragon_x75_5g_modem-rf_system_firmware | All versions | – |
| qualcomm | snapdragon_x80_5g_modem-rf_system_firmware | All versions | – |
| qualcomm | wcd9335_firmware | All versions | – |
| qualcomm | wcd9340_firmware | All versions | – |
| qualcomm | wcd9341_firmware | All versions | – |
| qualcomm | wcd9360_firmware | All versions | – |
| qualcomm | wcd9370_firmware | All versions | – |
| qualcomm | wcd9371_firmware | All versions | – |
| qualcomm | wcd9375_firmware | All versions | – |
| qualcomm | wcd9378_firmware | All versions | – |
| qualcomm | wcd9380_firmware | All versions | – |
| qualcomm | wcd9385_firmware | All versions | – |
| qualcomm | wcd9390_firmware | All versions | – |
| qualcomm | wcd9395_firmware | All versions | – |
| qualcomm | wcn3910_firmware | All versions | – |
| qualcomm | wcn3950_firmware | All versions | – |
| qualcomm | wcn3988_firmware | All versions | – |
| qualcomm | wcn6650_firmware | All versions | – |
| qualcomm | wcn6755_firmware | All versions | – |
| qualcomm | wcn7860_firmware | All versions | – |
| qualcomm | wcn7861_firmware | All versions | – |
| qualcomm | wcn7880_firmware | All versions | – |
| qualcomm | wcn7881_firmware | All versions | – |
| qualcomm | wsa8810_firmware | All versions | – |
| qualcomm | wsa8815_firmware | All versions | – |
| qualcomm | wsa8830_firmware | All versions | – |
| qualcomm | wsa8832_firmware | All versions | – |
| qualcomm | wsa8835_firmware | All versions | – |
| qualcomm | wsa8840_firmware | All versions | – |
| qualcomm | wsa8845_firmware | All versions | – |
| qualcomm | wsa8845h_firmware | All versions | – |
Original title
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
Original description
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
nvd CVSS3.1
6.5
Vulnerability type
CWE-617
Published: 2 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026