CVE-2025-47388CWE-120

CVE-2025-47388

High · published January 7, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

⚡ An alignment mishap is the key player here! This memory corruption vulnerability arises when pages are passed to the DSP starting from an unaligned address — like trying to fit a square peg in a round hole! Picture a factory assembly line where items are misaligned, causing major delays and chaos. This vulnerability is similar, as it disrupts the normal flow of data processing, leading to unpredictable behavior and potential system crashes. An attacker could exploit this misalignment, causing the system to crash or behave unexpectedly — which could be absolutely devastating for performance and reliability! While no known exploits are out there just yet, the potential for damage is significant and should not be taken lightly.

Put simply

Picture a factory assembly line where items are misaligned, causing major delays and chaos. This vulnerability is similar, as it disrupts the normal flow of data processing, leading to unpredictable behavior and potential system crashes. This vulnerability involves memory corruption during data transfers to the Digital Signal Processor (DSP) when starting addresses are not properly aligned, possibly allowing unauthorized access to sensitive information or a system crash.

What to do

An attacker could exploit this misalignment, causing the system to crash or behave unexpectedly — which could be absolutely devastating for performance and reliability! While no known exploits are out there just yet, the potential for damage is significant and should not be taken lightly. To protect your systems, apply the latest firmware updates that address this issue. Additionally, ensure that data alignment checks are implemented in your application's DSP interfacing code to prevent such mishaps in the future. You've got this! By following these steps, you can safeguard your systems and keep your hero status intact! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00081 · 0.2th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-07T17:17Z
Affected products (45)
ProductVersionsFixed in
qualcomm/fastconnect_6200_firmwareall versions—
qualcomm/fastconnect_6700_firmwareall versions—
qualcomm/fastconnect_6900_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/qcs610_firmwareall versions—
qualcomm/qmp1000_firmwareall versions—
qualcomm/video_collaboration_vc1_platform_firmwareall versions—
qualcomm/video_collaboration_vc3_platform_firmwareall versions—
qualcomm/sg6150_firmwareall versions—
qualcomm/sg6150p_firmwareall versions—
qualcomm/sm6475_firmwareall versions—
qualcomm/sm7435_firmwareall versions—
qualcomm/sm8735_firmwareall versions—
qualcomm/sm8750_firmwareall versions—
qualcomm/sm8750p_firmwareall versions—
qualcomm/snapdragon_4_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_6_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_w5\+_gen_1_wearable_platform_firmwareall versions—
qualcomm/sw5100_firmwareall versions—
qualcomm/sw5100p_firmwareall versions—
qualcomm/sxr2330p_firmwareall versions—
qualcomm/sxr2350p_firmwareall versions—
qualcomm/wcd9370_firmwareall versions—
qualcomm/wcd9375_firmwareall versions—
qualcomm/wcd9378_firmwareall versions—
qualcomm/wcd9380_firmwareall versions—
qualcomm/wcd9385_firmwareall versions—
qualcomm/wcd9395_firmwareall versions—
qualcomm/wcn3950_firmwareall versions—
qualcomm/wcn3980_firmwareall versions—
qualcomm/wcn3988_firmwareall versions—
qualcomm/wcn6755_firmwareall versions—
qualcomm/wcn7750_firmwareall versions—
qualcomm/wcn7860_firmwareall versions—
qualcomm/wcn7861_firmwareall versions—
qualcomm/wcn7880_firmwareall versions—
qualcomm/wcn7881_firmwareall versions—
qualcomm/wsa8810_firmwareall versions—
qualcomm/wsa8815_firmwareall versions—
qualcomm/wsa8830_firmwareall versions—
qualcomm/wsa8832_firmwareall versions—
qualcomm/wsa8835_firmwareall versions—
qualcomm/wsa8840_firmwareall versions—
qualcomm/wsa8845_firmwareall versions—
qualcomm/wsa8845h_firmwareall versions—
References (1)
EPSS history
Timeline
  • 06 JAN 22:48Z
    Buffer Copy without Checking Size of Input in DSP Service
    cvelistv5