CVE-2025-43993Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability.
Updated under an hour ago ()
Does this affect you?
It affects dell pro_rugged_13_ra13250_firmware and 13 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.
- CVSS
- 7.8 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-428
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Analyzed
- Record last updated
- Oct 11, 2026
- First seen by InfoSec Signals
- Oct 11, 2026
Affected products
dell pro_rugged_13_ra13250_firmware dell:pro_rugged_13_ra13250_firmware | before 3.2.0.22 | NVD |
dell pro_rugged_14_rb14250_firmware dell:pro_rugged_14_rb14250_firmware | before 3.2.0.22 | NVD |
dell latitude_5350_firmware dell:latitude_5350_firmware | before 3.2.0.22 | NVD |
dell latitutde_5450_firmware dell:latitutde_5450_firmware | before 3.2.0.22 | NVD |
dell latitude_5550_firmware dell:latitude_5550_firmware | before 3.2.0.22 | NVD |
dell latitude_7030_rugged_extreme_tablet_firmware dell:latitude_7030_rugged_extreme_tablet_firmware | before 3.2.0.22 | NVD |
dell latitude_7350_firmware dell:latitude_7350_firmware | before 3.2.0.22 | NVD |
dell latitude_7350_detachable_firmware dell:latitude_7350_detachable_firmware | before 3.2.0.22 | NVD |
dell latitude_7450_firmware dell:latitude_7450_firmware | before 3.2.0.22 | NVD |
dell latitude_7650_firmware dell:latitude_7650_firmware | before 3.2.0.22 | NVD |
dell latitude_9450_2-in-1_firmware dell:latitude_9450_2-in-1_firmware | before 3.2.0.22 | NVD |
dell mobile_precision_3591_firmware dell:mobile_precision_3591_firmware | before 3.2.0.22 | NVD |
dell precision_3490_firmware dell:precision_3490_firmware | before 3.2.0.22 | NVD |
dell precision_3590_firmware dell:precision_3590_firmware | before 3.2.0.22 | NVD |
References
- https://www.dell.com/support/kbdoc/en-us/000372605/dsa-2025-363vendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.