Strix
26.1K

CVE-2025-47404

HIGHCVSS 7.8/10EPSS 0.07%

Last modified

CVE-2025-47404 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.. EPSS estimates a 0.07% chance of exploitation in the next 30 days.

Description

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.07%

0.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
QualcommQca8695au FirmwareAll versions
QualcommQca9367 FirmwareAll versions
QualcommQca9377 FirmwareAll versions
QualcommQcc710 FirmwareAll versions
QualcommQcm2290 FirmwareAll versions
QualcommQcm4325 FirmwareAll versions
QualcommQcm5430 FirmwareAll versions
QualcommQcm6125 FirmwareAll versions
QualcommQcm6490 FirmwareAll versions
QualcommQcn6224 FirmwareAll versions
QualcommQcn6274 FirmwareAll versions
QualcommQcn9011 FirmwareAll versions
QualcommQcn9012 FirmwareAll versions
QualcommQcs2290 FirmwareAll versions
QualcommQcs4290 FirmwareAll versions
QualcommQcs6690 FirmwareAll versions
QualcommQcs8550 FirmwareAll versions
QualcommQep8111 FirmwareAll versions
QualcommQfw7114 FirmwareAll versions
QualcommQfw7124 FirmwareAll versions
QualcommQrb5165m FirmwareAll versions
QualcommQrb5165n FirmwareAll versions
Qualcomm215 Mobile FirmwareAll versions
QualcommVideo Collaboration Vc1 FirmwareAll versions
QualcommVideo Collaboration Vc3 FirmwareAll versions
QualcommVideo Collaboration Vc5 FirmwareAll versions
QualcommRobotics Rb2 FirmwareAll versions
QualcommRobotics Rb5 FirmwareAll versions
QualcommSa2150p FirmwareAll versions
QualcommSa4150p FirmwareAll versions
QualcommSa4155p FirmwareAll versions
QualcommSa6145p FirmwareAll versions
QualcommSa6150p FirmwareAll versions
QualcommSa6155 FirmwareAll versions
QualcommSa6155p FirmwareAll versions
QualcommSa7255p FirmwareAll versions
QualcommSa7775p FirmwareAll versions
QualcommSa8145p FirmwareAll versions
QualcommSa8150p FirmwareAll versions
QualcommSa8155 FirmwareAll versions
Qualcomm5g Fixed Wireless Access FirmwareAll versions
QualcommAr8031 FirmwareAll versions
QualcommAr8035 FirmwareAll versions
QualcommC-V2x 9150 FirmwareAll versions
QualcommCsra6620 FirmwareAll versions
QualcommCsra6640 FirmwareAll versions
QualcommFastconnect 6200 FirmwareAll versions
QualcommFastconnect 6700 FirmwareAll versions
QualcommFastconnect 6800 FirmwareAll versions
QualcommFastconnect 6900 FirmwareAll versions

Showing 50 of 188 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2025-47404?
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
How severe is CVE-2025-47404?
CVE-2025-47404 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.07% probability of exploitation in the next 30 days.
How do I fix CVE-2025-47404?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2025-47404?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST