CVE-2025-47399CWE-120

Buffer Copy Without Checking Size of Input in Camera

High · published February 2, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

⚡ A sneaky input can corrupt memory when updating sensor properties. Just like a recipe that goes horribly wrong with one wrong ingredient, this vulnerability is waiting to cause some chaotic side effects! Think of it as a hotel staff trying to process a reservation with invalid dates — it could lead to double bookings or even worse, complete system crashes! This memory corruption is like a glitch in the matrix, leading to unpredictable behavior. An attacker could exploit this vulnerability to cause unexpected crashes or erratic behavior in the system, potentially leading to data corruption or loss. It’s a high-stakes game where one small mistake can have devastating consequences. ⚠️

Put simply

Think of it as a hotel staff trying to process a reservation with invalid dates — it could lead to double bookings or even worse, complete system crashes! This memory corruption is like a glitch in the matrix, leading to unpredictable behavior. This vulnerability arises from memory corruption during an IOCTL call when invalid input parameters are processed for sensor property updates. Without proper validation, the system risks unpredictable behavior and crashes.

What to do

An attacker could exploit this vulnerability to cause unexpected crashes or erratic behavior in the system, potentially leading to data corruption or loss. It’s a high-stakes game where one small mistake can have devastating consequences. ⚠️ To remediate, ensure you apply input validation rigorously on all IOCTL calls. Update to the latest version that addresses this memory corruption issue to safeguard against potential exploitation. Don't wait! You've got this! By taking these proactive steps, you're not just fixing the issue, you're boosting your security hero status! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00103 · 1.0th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-02T15:20Z
EPSS history
Timeline
  • 02 FEB 15:20Z
    Buffer Copy Without Checking Size of Input in Camera
    cvelistv5