CVE-2025-47404CWE-120CWE-787

CVE-2025-47404

Medium · published May 4, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
0.0
In the wild
Unconfirmed
What it is

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00066 · 0.0th percentile
Weaknesses
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-787 · Out-of-bounds Write
Published
2026-05-04T21:16Z
Affected products (188)
ProductVersionsFixed in
qualcomm/qca8695au_firmwareall versions—
qualcomm/qca9367_firmwareall versions—
qualcomm/qca9377_firmwareall versions—
qualcomm/qcc710_firmwareall versions—
qualcomm/qcm2290_firmwareall versions—
qualcomm/qcm4325_firmwareall versions—
qualcomm/qcm5430_firmwareall versions—
qualcomm/qcm6125_firmwareall versions—
qualcomm/qcm6490_firmwareall versions—
qualcomm/qcn6224_firmwareall versions—
qualcomm/qcn6274_firmwareall versions—
qualcomm/qcn9011_firmwareall versions—
qualcomm/qcn9012_firmwareall versions—
qualcomm/qcs2290_firmwareall versions—
qualcomm/qcs4290_firmwareall versions—
qualcomm/qcs6690_firmwareall versions—
qualcomm/qcs8550_firmwareall versions—
qualcomm/qep8111_firmwareall versions—
qualcomm/qfw7114_firmwareall versions—
qualcomm/qfw7124_firmwareall versions—
qualcomm/qrb5165m_firmwareall versions—
qualcomm/qrb5165n_firmwareall versions—
qualcomm/215_mobile_firmwareall versions—
qualcomm/video_collaboration_vc1_firmwareall versions—
qualcomm/video_collaboration_vc3_firmwareall versions—
qualcomm/video_collaboration_vc5_firmwareall versions—
qualcomm/robotics_rb2_firmwareall versions—
qualcomm/robotics_rb5_firmwareall versions—
qualcomm/sa2150p_firmwareall versions—
qualcomm/sa4150p_firmwareall versions—
qualcomm/sa4155p_firmwareall versions—
qualcomm/sa6145p_firmwareall versions—
qualcomm/sa6150p_firmwareall versions—
qualcomm/sa6155_firmwareall versions—
qualcomm/sa6155p_firmwareall versions—
qualcomm/sa7255p_firmwareall versions—
qualcomm/sa7775p_firmwareall versions—
qualcomm/sa8145p_firmwareall versions—
qualcomm/sa8150p_firmwareall versions—
qualcomm/sa8155_firmwareall versions—
qualcomm/5g_fixed_wireless_access_firmwareall versions—
qualcomm/ar8031_firmwareall versions—
qualcomm/ar8035_firmwareall versions—
qualcomm/c-v2x_9150_firmwareall versions—
qualcomm/csra6620_firmwareall versions—
qualcomm/csra6640_firmwareall versions—
qualcomm/fastconnect_6200_firmwareall versions—
qualcomm/fastconnect_6700_firmwareall versions—
qualcomm/fastconnect_6800_firmwareall versions—
qualcomm/fastconnect_6900_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/flight_rb5_5g_firmwareall versions—
qualcomm/fwa_gen_3_ultra_firmwareall versions—
qualcomm/g1_gen_1_firmwareall versions—
qualcomm/g3x_gen_2_firmwareall versions—
qualcomm/kalpeni_firmwareall versions—
qualcomm/lemans_au_lgit_firmwareall versions—
qualcomm/lemansau_firmwareall versions—
qualcomm/mdm9250_firmwareall versions—
qualcomm/mdm9628_firmwareall versions—
qualcomm/milos_firmwareall versions—
qualcomm/milos_iot_firmwareall versions—
qualcomm/qam8255p_firmwareall versions—
qualcomm/qam8295p_firmwareall versions—
qualcomm/qamsrv1h_firmwareall versions—
qualcomm/qamsrv1m_firmwareall versions—
qualcomm/qca2066_firmwareall versions—
qualcomm/qca6174a_firmwareall versions—
qualcomm/qca6391_firmwareall versions—
qualcomm/qca6564a_firmwareall versions—
qualcomm/qca6564au_firmwareall versions—
qualcomm/qca6574_firmwareall versions—
qualcomm/qca6574a_firmwareall versions—
qualcomm/qca6574au_firmwareall versions—
qualcomm/qca6584au_firmwareall versions—
qualcomm/qca6595_firmwareall versions—
qualcomm/qca6595au_firmwareall versions—
qualcomm/qca6678aq_firmwareall versions—
qualcomm/qca6688aq_firmwareall versions—
qualcomm/qca6696_firmwareall versions—
qualcomm/qca6698aq_firmwareall versions—
qualcomm/qca6698au_firmwareall versions—
qualcomm/qca6797aq_firmwareall versions—
qualcomm/qca8081_firmwareall versions—
qualcomm/qca8337_firmwareall versions—
qualcomm/wcd9390_firmwareall versions—
qualcomm/wcd9395_firmwareall versions—
qualcomm/wcn3615_firmwareall versions—
qualcomm/wcn3660b_firmwareall versions—
qualcomm/wcn3680b_firmwareall versions—
qualcomm/wcn3910_firmwareall versions—
qualcomm/wcn3950_firmwareall versions—
qualcomm/wcn3980_firmwareall versions—
qualcomm/wcn3988_firmwareall versions—
qualcomm/wcn3990_firmwareall versions—
qualcomm/wcn6450_firmwareall versions—
qualcomm/wcn6650_firmwareall versions—
qualcomm/wcn6755_firmwareall versions—
qualcomm/wcn7861_firmwareall versions—
qualcomm/wcn7881_firmwareall versions—
qualcomm/wsa8810_firmwareall versions—
qualcomm/wsa8815_firmwareall versions—
qualcomm/wsa8830_firmwareall versions—
qualcomm/wsa8832_firmwareall versions—
qualcomm/wsa8835_firmwareall versions—
qualcomm/wsa8840_firmwareall versions—
qualcomm/wsa8845_firmwareall versions—
qualcomm/wsa8845h_firmwareall versions—
qualcomm/sa8155p_firmwareall versions—
qualcomm/sa8195p_firmwareall versions—
qualcomm/sa8255p_firmwareall versions—
qualcomm/sa8295p_firmwareall versions—
qualcomm/sa8620p_firmwareall versions—
qualcomm/sa8770p_firmwareall versions—
qualcomm/sa9000p_firmwareall versions—
qualcomm/sd662_firmwareall versions—
qualcomm/sd865_5g_firmwareall versions—
qualcomm/sda660_firmwareall versions—
qualcomm/sm6225p_firmwareall versions—
qualcomm/sm6650p_firmwareall versions—
qualcomm/sm7325p_firmwareall versions—
qualcomm/sm7525_firmwareall versions—
qualcomm/sm7550_firmwareall versions—
qualcomm/sm7550p_firmwareall versions—
qualcomm/sm7635p_firmwareall versions—
qualcomm/sm7675_firmwareall versions—
qualcomm/sm7675p_firmwareall versions—
qualcomm/sm8550p_firmwareall versions—
qualcomm/sm8635_firmwareall versions—
qualcomm/sm8635p_firmwareall versions—
qualcomm/sm8650q_firmwareall versions—
qualcomm/smart_audio_400_firmwareall versions—
qualcomm/snapdragon_4_gen_1_mobile_firmwareall versions—
qualcomm/snapdragon_460_mobile_firmwareall versions—
qualcomm/snapdragon_480_5g_mobile_firmwareall versions—
qualcomm/snapdragon_480\+_5g_mobile_firmwareall versions—
qualcomm/snapdragon_6_gen_4_mobile_firmwareall versions—
qualcomm/snapdragon_660_mobile_firmwareall versions—
qualcomm/snapdragon_662_mobile_firmwareall versions—
qualcomm/snapdragon_680_4g_mobile_firmwareall versions—
qualcomm/snapdragon_685_4g_mobile_firmwareall versions—
qualcomm/snapdragon_690_5g_mobile_firmwareall versions—
qualcomm/snapdragon_695_5g_mobile_firmwareall versions—
qualcomm/snapdragon_778g_5g_mobile_firmwareall versions—
qualcomm/snapdragon_778g\+_5g_mobile_firmwareall versions—
qualcomm/snapdragon_782g_mobile_firmwareall versions—
qualcomm/snapdragon_7c\+_gen_3_compute_firmwareall versions—
qualcomm/snapdragon_7s_gen_3_mobile_firmwareall versions—
qualcomm/snapdragon_8_gen_2_mobile_firmwareall versions—
qualcomm/snapdragon_8_gen_3_mobile_firmwareall versions—
qualcomm/snapdragon_8\+_gen_2_mobile_firmwareall versions—
qualcomm/snapdragon_865_5g_mobile_firmwareall versions—
qualcomm/snapdragon_865\+_5g_mobile_firmwareall versions—
qualcomm/snapdragon_870_5g_mobile_firmwareall versions—
qualcomm/snapdragon_888_5g_mobile_firmwareall versions—
qualcomm/snapdragon_888\+_5g_mobile_firmwareall versions—
qualcomm/snapdragon_auto_5g_modem-rf_firmwareall versions—
qualcomm/snapdragon_auto_5g_modem-rf_gen_2_firmwareall versions—
qualcomm/snapdragon_w5\+_gen_1_wearable_firmwareall versions—
qualcomm/snapdragon_x12_lte_modem_firmwareall versions—
qualcomm/snapdragon_x32_5g_modem-rf_firmwareall versions—
qualcomm/snapdragon_x35_5g_modem-rf_firmwareall versions—
qualcomm/snapdragon_x53_5g_modem-rf_firmwareall versions—
qualcomm/snapdragon_x55_5g_modem-rf_firmwareall versions—
qualcomm/snapdragon_x72_5g_modem-rf_firmwareall versions—
qualcomm/snapdragon_x75_5g_modem-rf_firmwareall versions—
qualcomm/snapdragon_xr2_5g_firmwareall versions—
qualcomm/snapdragon_xr2\+_gen_1_firmwareall versions—
qualcomm/snapdragon_auto_4g_modem_firmwareall versions—
qualcomm/srv1h_firmwareall versions—
qualcomm/srv1m_firmwareall versions—
qualcomm/sw5100_firmwareall versions—
qualcomm/sw5100p_firmwareall versions—
qualcomm/sxr2230p_firmwareall versions—
qualcomm/sxr2250p_firmwareall versions—
qualcomm/sxr2330p_firmwareall versions—
qualcomm/sxr2350p_firmwareall versions—
qualcomm/wcd9326_firmwareall versions—
qualcomm/wcd9335_firmwareall versions—
qualcomm/wcd9340_firmwareall versions—
qualcomm/wcd9341_firmwareall versions—
qualcomm/wcd9360_firmwareall versions—
qualcomm/wcd9370_firmwareall versions—
qualcomm/wcd9371_firmwareall versions—
qualcomm/wcd9375_firmwareall versions—
qualcomm/wcd9378_firmwareall versions—
qualcomm/wcd9380_firmwareall versions—
qualcomm/wcd9385_firmwareall versions—
References (1)
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html · [email protected]
EPSS history
Timeline
  • 04 MAY 16:43Z
    Buffer Copy Without Checking Size of Input in Automotive Audio
    cvelistv5