CVE-2025-47394CWE-120

CVE-2025-47394

High · published January 7, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

⚡ Overlapping buffers are causing a memory mishap! This sneaky memory corruption issue could lead to unexpected behavior—think of it as a kitchen where two chefs are trying to cook in the same pot without watching what the other is doing. 🍳 Imagine two artists trying to paint a mural on the same wall without any care for what the other is doing; the result could be a colorful mess, just like how overlapping buffers can lead to unpredictable memory states. An attacker could exploit this vulnerability to manipulate memory, leading to crashes or even arbitrary code execution. It’s like setting off fireworks in a crowded venue—chaos could ensue, putting your entire application at risk!

Put simply

Imagine two artists trying to paint a mural on the same wall without any care for what the other is doing; the result could be a colorful mess, just like how overlapping buffers can lead to unpredictable memory states. CVE-2025-47394 arises from incorrect offset calculations when copying overlapping buffers, creating a potential for memory corruption that could be exploited by an attacker.

What to do

An attacker could exploit this vulnerability to manipulate memory, leading to crashes or even arbitrary code execution. It’s like setting off fireworks in a crowded venue—chaos could ensue, putting your entire application at risk! To fix this, update your application to the latest version that addresses this issue. Ensure that your memory operations are properly validated to avoid overlapping buffer scenarios. Don’t forget to conduct thorough testing after applying the patch! You've got this! With a quick update and vigilance, you’ll lock this vulnerability down in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00081 · 0.2th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-07T17:17Z
Affected products (45)
ProductVersionsFixed in
qualcomm/fastconnect_6200_firmwareall versions—
qualcomm/fastconnect_6700_firmwareall versions—
qualcomm/fastconnect_6900_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/qcs610_firmwareall versions—
qualcomm/qmp1000_firmwareall versions—
qualcomm/sg6150_firmwareall versions—
qualcomm/sg6150p_firmwareall versions—
qualcomm/sm6475_firmwareall versions—
qualcomm/sm7435_firmwareall versions—
qualcomm/sm8735_firmwareall versions—
qualcomm/sm8750_firmwareall versions—
qualcomm/sm8750p_firmwareall versions—
qualcomm/snapdragon_4_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_6_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_w5\+_gen_1_wearable_platform_firmwareall versions—
qualcomm/sw5100_firmwareall versions—
qualcomm/sw5100p_firmwareall versions—
qualcomm/sxr2330p_firmwareall versions—
qualcomm/sxr2350p_firmwareall versions—
qualcomm/video_collaboration_vc1_platform_firmwareall versions—
qualcomm/video_collaboration_vc3_platform_firmwareall versions—
qualcomm/wcd9370_firmwareall versions—
qualcomm/wcd9375_firmwareall versions—
qualcomm/wcd9378_firmwareall versions—
qualcomm/wcd9380_firmwareall versions—
qualcomm/wcd9385_firmwareall versions—
qualcomm/wcd9395_firmwareall versions—
qualcomm/wcn3950_firmwareall versions—
qualcomm/wcn3980_firmwareall versions—
qualcomm/wcn3988_firmwareall versions—
qualcomm/wcn6755_firmwareall versions—
qualcomm/wcn7750_firmwareall versions—
qualcomm/wcn7860_firmwareall versions—
qualcomm/wcn7861_firmwareall versions—
qualcomm/wcn7880_firmwareall versions—
qualcomm/wcn7881_firmwareall versions—
qualcomm/wsa8810_firmwareall versions—
qualcomm/wsa8815_firmwareall versions—
qualcomm/wsa8830_firmwareall versions—
qualcomm/wsa8832_firmwareall versions—
qualcomm/wsa8835_firmwareall versions—
qualcomm/wsa8840_firmwareall versions—
qualcomm/wsa8845_firmwareall versions—
qualcomm/wsa8845h_firmwareall versions—
References (1)
EPSS history
Timeline
  • 06 JAN 22:48Z
    Buffer Copy Without Checking Size of Input in DSP Service
    cvelistv5