CVE-2025-47393CWE-129

CVE-2025-47393

High ยท published January 7, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

โšก A sneaky memory corruption issue lurks in the kernel driver, ready to cause mayhem if the wrong resources are accessed! ๐Ÿ”ฅ Think of this as a factory where faulty instructions can lead to the assembly line producing defective products โ€” at the risk of crashing the entire operation if unchecked! An attacker could exploit this vulnerability to crash the system or, in the worst case, gain unauthorized access to sensitive data and control. This could potentially lead to a complete system compromise, leaving users vulnerable and exposed to further attacks.

Put simply

Think of this as a factory where faulty instructions can lead to the assembly line producing defective products โ€” at the risk of crashing the entire operation if unchecked! This memory corruption vulnerability occurs when the kernel driver accesses resources incorrectly, leading to unpredictable behavior and possible execution of arbitrary code due to invalid memory operations.

What to do

An attacker could exploit this vulnerability to crash the system or, in the worst case, gain unauthorized access to sensitive data and control. This could potentially lead to a complete system compromise, leaving users vulnerable and exposed to further attacks. To remediate this issue, patch the kernel driver to the latest version provided by your vendor as soon as possible. Ensure that system integrity checks are in place to monitor any unusual access patterns. Regularly review and update your security policies to include checks for kernel vulnerabilities. You've got this! With these steps, you'll fortify your defenses and keep your systems safe! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
7.8 ยท HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00081 ยท 0.2th percentile
Weakness
CWE-129 ยท Improper Validation of Array Index
Published
2026-01-07T17:17Z
Affected products (18)
ProductVersionsFixed in
qualcomm/qam8255p_firmwareall versionsโ€”
qualcomm/qam8650p_firmwareall versionsโ€”
qualcomm/qam8775p_firmwareall versionsโ€”
qualcomm/qamsrv1h_firmwareall versionsโ€”
qualcomm/qamsrv1m_firmwareall versionsโ€”
qualcomm/qca6595_firmwareall versionsโ€”
qualcomm/qca6698aq_firmwareall versionsโ€”
qualcomm/qca6797aq_firmwareall versionsโ€”
qualcomm/sa7255p_firmwareall versionsโ€”
qualcomm/sa7775p_firmwareall versionsโ€”
qualcomm/sa8255p_firmwareall versionsโ€”
qualcomm/sa8620p_firmwareall versionsโ€”
qualcomm/sa8650p_firmwareall versionsโ€”
qualcomm/sa8770p_firmwareall versionsโ€”
qualcomm/sa8775p_firmwareall versionsโ€”
qualcomm/sa9000p_firmwareall versionsโ€”
qualcomm/srv1h_firmwareall versionsโ€”
qualcomm/srv1m_firmwareall versionsโ€”
References (1)
EPSS history
Timeline
  • 06 JAN 22:48Z
    Improper Validation of Array Index in Automotive Linux OS
    cvelistv5