CVE-2025-47408
EUVD-2025-20963304.05.2026, 17:16
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| qualcomm | fastconnect_6200_firmware | - |
| qualcomm | fastconnect_6900_firmware | - |
| qualcomm | fastconnect_7800_firmware | - |
| qualcomm | iqx5121_firmware | - |
| qualcomm | iqx7181_firmware | - |
| qualcomm | qca0000_firmware | - |
| qualcomm | sc8380xp_firmware | - |
| qualcomm | sd865_5g_firmware | - |
| qualcomm | sm6250_firmware | - |
| qualcomm | snapdragon_7c_compute_firmware | - |
| qualcomm | snapdragon_7c_gen_2_compute_firmware | - |
| qualcomm | snapdragon_xr2_5g_firmware | - |
| qualcomm | snapdragon_xr2\+_gen_1_firmware | - |
| qualcomm | wcd9380_firmware | - |
| qualcomm | wcd9385_firmware | - |
| qualcomm | wsa8810_firmware | - |
| qualcomm | wsa8815_firmware | - |
| qualcomm | wsa8840_firmware | - |
| qualcomm | wsa8845_firmware | - |
| qualcomm | wsa8845h_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-822 - Untrusted Pointer DereferenceThe program obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.