Product:
Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver
Summary
Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-43993 |
Exploitation
To exploit this vulnerability, an attacker with local access can manipulate the search path used by the affected software. By placing a malicious executable in a location that is searched before the legitimate executable, the attacker can achieve code execution with the privileges of the affected application.
Affected Products
- Wireless 5932e: Affected by the unquoted search path vulnerability, allowing potential code execution.
- Qualcomm Snapdragon X62 Firmware: Vulnerable to exploitation through local access, leading to high impact on confidentiality, integrity, and availability.
- GNSS/GPS Driver: Contains the same vulnerability, posing risks to systems utilizing this driver.
Mitigation
To mitigate this vulnerability, users should update the affected products to versions 3.2.0.22 or later. Additionally, ensuring that the search paths are properly quoted can help prevent exploitation of this vulnerability.