CVE-2025-47343CWE-822

CVE-2025-47343

High ยท published January 7, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

โšก A sneaky memory corruption bug is lurking in your video sessions, making it crucial to pay attention! ๐ŸŽฅ๐Ÿ’ฅ Think of it like a movie set where the crew accidentally misplaces key props, leading to a scene that just doesn't make sense. In this case, the memory corruption disrupts how video parameters are processed, causing potential chaos during playback! If exploited, an attacker could disrupt video sessions or even crash applications handling video, leading to an absolutely devastating user experience. Imagine your important video call freezing midway or worse, resulting in data leaks during critical moments!

Put simply

Think of it like a movie set where the crew accidentally misplaces key props, leading to a scene that just doesn't make sense. In this case, the memory corruption disrupts how video parameters are processed, causing potential chaos during playback! This vulnerability occurs when the software mishandles memory while processing video session parameters, allowing for potential exploitation that could lead to application crashes or unwanted behavior.

What to do

If exploited, an attacker could disrupt video sessions or even crash applications handling video, leading to an absolutely devastating user experience. Imagine your important video call freezing midway or worse, resulting in data leaks during critical moments! To mitigate this risk, patch your software to the latest version immediately and review your video handling logic for any other potential memory mishandling. Keeping your libraries up-to-date will help you stay ahead of lurking threats! Youโ€™ve got this! With these steps, you'll strengthen your defenses and keep your video sessions smooth and secure. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
7.8 ยท HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00081 ยท 0.2th percentile
Weakness
CWE-822 ยท Untrusted Pointer Dereference
Published
2026-01-07T17:17Z
Affected products (25)
ProductVersionsFixed in
qualcomm/video_collaboration_vc3_platform_firmwareall versionsโ€”
qualcomm/cologne_firmwareall versionsโ€”
qualcomm/fastconnect_6700_firmwareall versionsโ€”
qualcomm/fastconnect_6900_firmwareall versionsโ€”
qualcomm/fastconnect_7800_firmwareall versionsโ€”
qualcomm/qca0000_firmwareall versionsโ€”
qualcomm/qcm5430_firmwareall versionsโ€”
qualcomm/qcm6490_firmwareall versionsโ€”
qualcomm/sc8380xp_firmwareall versionsโ€”
qualcomm/wcd9370_firmwareall versionsโ€”
qualcomm/wcd9375_firmwareall versionsโ€”
qualcomm/wcd9378c_firmwareall versionsโ€”
qualcomm/wcd9380_firmwareall versionsโ€”
qualcomm/wcd9385_firmwareall versionsโ€”
qualcomm/wsa8840_firmwareall versionsโ€”
qualcomm/wsa8845_firmwareall versionsโ€”
qualcomm/wsa8845h_firmwareall versionsโ€”
qualcomm/x2000077_firmwareall versionsโ€”
qualcomm/x2000086_firmwareall versionsโ€”
qualcomm/x2000090_firmwareall versionsโ€”
qualcomm/x2000092_firmwareall versionsโ€”
qualcomm/x2000094_firmwareall versionsโ€”
qualcomm/xg101002_firmwareall versionsโ€”
qualcomm/xg101032_firmwareall versionsโ€”
qualcomm/xg101039_firmwareall versionsโ€”
References (1)
EPSS history
Timeline
  • 06 JAN 22:48Z
    Untrusted Pointer Dereference in Video
    cvelistv5