Published: 12/01/2025
Preface: Qualcomm HLOS (High-Level Operating System) refers to the operating system layer, like Android, that runs on a Qualcomm Snapdragon chipset and is responsible for general device functionality. “TA” (Trusted Application) is a component of the Qualcomm Trusted Execution Environment (QTEE) that runs in a secure environment, separate from the HLOS. Security issues arise when vulnerabilities exist at the boundary between the HLOS and a TA, such as memory corruption when the HLOS improperly processes commands from a TA, as described in Qualcomm security bulletins.
Background: The Qualcomm Secure Execution Environment Communication (QSEECom) lifecycle describes how a client application in the normal world interacts with a trusted application (TA) in the secure world via the qseecom kernel driver.
Step 1. QSEECom_start_app: Loads the TA into QTEE and allocates shared memory (ion_sbuffer) for communication.
Step 2. ion_sbuffer: The shared memory buffer used for both input and output.
Step 3:QSEECom_send_cmd: Sends a command to the TA, using the shared buffer.
Step 4: QSEECom_shutdown_app: Cleans up and unloads the TA.
Vulnerability details: CVE-2025-47319
- Component: High-Level Operating System (HLOS)
- Nature: Design weakness in buffer size calculation when processing commands from a Trusted Application (TA).
- Impact: Could lead to buffer overflow, exposing sensitive system information and enabling arbitrary code execution.
- Severity: Qualcomm rates it as critical, though its CVSS score is medium.
- Discovery: Internal Qualcomm security team.
Mitigation: Patches have been shared with OEMs; users should update devices promptly.
Official announcement: Please refer to the link for details –
https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html