CVE-2025-43993: dell latitude_5350_firmware Unquoted Search Path or Element

Vulnerability summary

CVE-2025-43993 is a high (CVSS 7.8) Unquoted Search Path or Element vulnerability in dell latitude_5350_firmware. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.8% of scored vulnerabilities.

Timeline

1. 25-09-2025
   PublishedVulnerability first disclosed.
2. 26-09-2025
   Last modifiedVulnerability information updated.

Description

Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.

• CWE-428Unquoted Search Path or ElementThe product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.