CVE-2025-47334CWE-120

CVE-2025-47334

Medium · published January 7, 2026

CVSS v3.1
6.7
EPSS
0%
Percentile
0.3
In the wild
Unconfirmed
What it is

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00085 · 0.3th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-07T17:17Z
Affected products (146)
ProductVersionsFixed in
qualcomm/csra6620_firmwareall versions—
qualcomm/csra6640_firmwareall versions—
qualcomm/fastconnect_6200_firmwareall versions—
qualcomm/fastconnect_6700_firmwareall versions—
qualcomm/fastconnect_6900_firmwareall versions—
qualcomm/sa7255p_firmwareall versions—
qualcomm/sa7775p_firmwareall versions—
qualcomm/sa8255p_firmwareall versions—
qualcomm/sa8620p_firmwareall versions—
qualcomm/sa8650p_firmwareall versions—
qualcomm/sa8770p_firmwareall versions—
qualcomm/sa8775p_firmwareall versions—
qualcomm/sa9000p_firmwareall versions—
qualcomm/sd_8_gen1_5g_firmwareall versions—
qualcomm/sg4150p_firmwareall versions—
qualcomm/sg8275_firmwareall versions—
qualcomm/sg8275p_firmwareall versions—
qualcomm/sm4635_firmwareall versions—
qualcomm/sm6225p_firmwareall versions—
qualcomm/sm6475_firmwareall versions—
qualcomm/sm6650_firmwareall versions—
qualcomm/sm6650p_firmwareall versions—
qualcomm/sm7325p_firmwareall versions—
qualcomm/sm7435_firmwareall versions—
qualcomm/sm7550_firmwareall versions—
qualcomm/sm7550p_firmwareall versions—
qualcomm/sm7635_firmwareall versions—
qualcomm/sm7635p_firmwareall versions—
qualcomm/sm7675_firmwareall versions—
qualcomm/sm7675p_firmwareall versions—
qualcomm/sm8475p_firmwareall versions—
qualcomm/sm8550p_firmwareall versions—
qualcomm/sm8635_firmwareall versions—
qualcomm/sm8635p_firmwareall versions—
qualcomm/sm8650q_firmwareall versions—
qualcomm/sm8735_firmwareall versions—
qualcomm/sm8750_firmwareall versions—
qualcomm/sm8750p_firmwareall versions—
qualcomm/smart_audio_400_platform_firmwareall versions—
qualcomm/snapdragon_4_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_4_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_460_mobile_platform_firmwareall versions—
qualcomm/snapdragon_480_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmwareall versions—
qualcomm/snapdragon_6_gen_1_mobile_platform_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/flight_rb5_5g_platform_firmwareall versions—
qualcomm/qam8255p_firmwareall versions—
qualcomm/qam8650p_firmwareall versions—
qualcomm/qam8775p_firmwareall versions—
qualcomm/qamsrv1h_firmwareall versions—
qualcomm/qamsrv1m_firmwareall versions—
qualcomm/qca6391_firmwareall versions—
qualcomm/qca6595_firmwareall versions—
qualcomm/qca6595au_firmwareall versions—
qualcomm/qca6678aq_firmwareall versions—
qualcomm/qca6698aq_firmwareall versions—
qualcomm/qca6698au_firmwareall versions—
qualcomm/qca6797aq_firmwareall versions—
qualcomm/qcm2290_firmwareall versions—
qualcomm/qcm4490_firmwareall versions—
qualcomm/qcm5430_firmwareall versions—
qualcomm/qcm6490_firmwareall versions—
qualcomm/qcm8550_firmwareall versions—
qualcomm/qcn9011_firmwareall versions—
qualcomm/qcn9012_firmwareall versions—
qualcomm/qcs2290_firmwareall versions—
qualcomm/qcs410_firmwareall versions—
qualcomm/qcs4490_firmwareall versions—
qualcomm/qcs5430_firmwareall versions—
qualcomm/snapdragon_7c\+_gen_3_compute_firmwareall versions—
qualcomm/snapdragon_8_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8_gen_3_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8\+_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8\+_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_888_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)_firmwareall versions—
qualcomm/snapdragon_ar1_gen_1_platform_firmwareall versions—
qualcomm/snapdragon_ar1_gen_1_platform_\"luna1\"_firmwareall versions—
qualcomm/snapdragon_ar2_gen_1_platform_firmwareall versions—
qualcomm/snapdragon_w5\+_gen_1_wearable_platform_firmwareall versions—
qualcomm/srv1h_firmwareall versions—
qualcomm/srv1m_firmwareall versions—
qualcomm/ssg2115p_firmwareall versions—
qualcomm/ssg2125p_firmwareall versions—
qualcomm/sw5100_firmwareall versions—
qualcomm/sw5100p_firmwareall versions—
qualcomm/sxr1230p_firmwareall versions—
qualcomm/sxr2230p_firmwareall versions—
qualcomm/sxr2250p_firmwareall versions—
qualcomm/sxr2330p_firmwareall versions—
qualcomm/sxr2350p_firmwareall versions—
qualcomm/wcd9335_firmwareall versions—
qualcomm/wcd9370_firmwareall versions—
qualcomm/wcd9371_firmwareall versions—
qualcomm/wcd9375_firmwareall versions—
qualcomm/wcd9378_firmwareall versions—
qualcomm/wcd9380_firmwareall versions—
qualcomm/wcd9385_firmwareall versions—
qualcomm/wcd9390_firmwareall versions—
qualcomm/wcd9395_firmwareall versions—
qualcomm/wcn3910_firmwareall versions—
qualcomm/snapdragon_782g_mobile_platform_\(sm7325-af\)_firmwareall versions—
qualcomm/snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\)_firmwareall versions—
qualcomm/snapdragon_778g_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_7\+_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_7_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_695_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmwareall versions—
qualcomm/snapdragon_680_4g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_662_mobile_platform_firmwareall versions—
qualcomm/robotics_rb5_platform_firmwareall versions—
qualcomm/robotics_rb2_platform_firmwareall versions—
qualcomm/video_collaboration_vc5_platform_firmwareall versions—
qualcomm/video_collaboration_vc3_platform_firmwareall versions—
qualcomm/video_collaboration_vc1_platform_firmwareall versions—
qualcomm/qrb5165n_firmwareall versions—
qualcomm/qrb5165m_firmwareall versions—
qualcomm/qmp1000_firmwareall versions—
qualcomm/qcs9100_firmwareall versions—
qualcomm/qcs8550_firmwareall versions—
qualcomm/qcs8250_firmwareall versions—
qualcomm/qcs7230_firmwareall versions—
qualcomm/qcs6490_firmwareall versions—
qualcomm/qcs615_firmwareall versions—
qualcomm/qcs610_firmwareall versions—
qualcomm/wcn3950_firmwareall versions—
qualcomm/wcn3980_firmwareall versions—
qualcomm/wcn3988_firmwareall versions—
qualcomm/wcn6650_firmwareall versions—
qualcomm/wcn6740_firmwareall versions—
qualcomm/wcn6755_firmwareall versions—
qualcomm/wcn7750_firmwareall versions—
qualcomm/wcn7860_firmwareall versions—
qualcomm/wcn7861_firmwareall versions—
qualcomm/wcn7880_firmwareall versions—
qualcomm/wcn7881_firmwareall versions—
qualcomm/wsa8810_firmwareall versions—
qualcomm/wsa8815_firmwareall versions—
qualcomm/wsa8830_firmwareall versions—
qualcomm/wsa8832_firmwareall versions—
qualcomm/wsa8835_firmwareall versions—
qualcomm/wsa8840_firmwareall versions—
qualcomm/wsa8845_firmwareall versions—
qualcomm/wsa8845h_firmwareall versions—
References (1)
https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2026-bulletin.html · [email protected]
EPSS history
Timeline
  • 06 JAN 22:48Z
    Buffer Copy Without Checking Size of Input in Camera Driver
    cvelistv5