CVE-2025-47367CWE-787

CVE-2025-47367

High · published November 4, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.3
In the wild
Unconfirmed
What it is

⚡ A sneaky memory corruption bug lurks in IOCTL processing, giving attackers a chance to mess with your system from the inside! Think of it like a delivery driver losing track of packages in a warehouse — if they don't properly manage where things go, valuable items can get misplaced or damaged. That's how this memory corruption issue can throw your system into disarray! An attacker could exploit this vulnerability to corrupt memory, leading to unexpected behavior or even crashing your system — it’s like giving a chaotic kid free reign in a candy store! In the worst case, it could allow an unauthorized user to gain control of critical functions.

Put simply

Think of it like a delivery driver losing track of packages in a warehouse — if they don't properly manage where things go, valuable items can get misplaced or damaged. That's how this memory corruption issue can throw your system into disarray! This vulnerability arises during IOCTL processing when the system accesses a buffer improperly, leading to memory corruption that could be exploited to execute arbitrary code or crash the system.

What to do

An attacker could exploit this vulnerability to corrupt memory, leading to unexpected behavior or even crashing your system — it’s like giving a chaotic kid free reign in a candy store! In the worst case, it could allow an unauthorized user to gain control of critical functions. To mitigate this risk, ensure your system is patched to the latest version as soon as updates become available. Additionally, perform a thorough audit of your IOCTL handling code to check for any unsafe buffer accesses — safety first! You've got this! With these steps, you're on your way to securing your system like a pro! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00087 · 0.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-11-04T09:15Z
Affected products (31)
ProductVersionsFixed in
qualcomm/qcm6490_firmwareall versions—
qualcomm/qcs5430_firmwareall versions—
qualcomm/qcs6490_firmwareall versions—
qualcomm/video_collaboration_vc3_platform_firmwareall versions—
qualcomm/sc8380xp_firmwareall versions—
qualcomm/snapdragon_7c\+_gen_3_compute_firmwareall versions—
qualcomm/snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmwareall versions—
qualcomm/snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmwareall versions—
qualcomm/wcd9370_firmwareall versions—
qualcomm/wcd9375_firmwareall versions—
qualcomm/wcd9378c_firmwareall versions—
qualcomm/wcd9380_firmwareall versions—
qualcomm/wcd9385_firmwareall versions—
qualcomm/wsa8830_firmwareall versions—
qualcomm/wsa8835_firmwareall versions—
qualcomm/wsa8840_firmwareall versions—
qualcomm/wsa8845_firmwareall versions—
qualcomm/wsa8845h_firmwareall versions—
qualcomm/x2000077_firmwareall versions—
qualcomm/x2000086_firmwareall versions—
qualcomm/x2000090_firmwareall versions—
qualcomm/x2000092_firmwareall versions—
qualcomm/x2000094_firmwareall versions—
qualcomm/xg101002_firmwareall versions—
qualcomm/xg101032_firmwareall versions—
qualcomm/xg101039_firmwareall versions—
qualcomm/fastconnect_6700_firmwareall versions—
qualcomm/fastconnect_6900_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/qcc2072_firmwareall versions—
qualcomm/qcm5430_firmwareall versions—
References (1)
EPSS history
Timeline
  • 04 NOV 03:19Z
    Out-of-bounds Write in WinBlast Driver
    cvelistv5