CVE-2025-47202

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400, the lack of a length check leads to out-of-bounds writes.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jul 7, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-472034.5dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.CVE-2025-472046.1An issue was discovered in post.php in bootstrap-multiselect (aka Bootstrap Multiselect) 1.1.2. A PHP script in the source code echoes arbitCVE-2025-472054.9A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an aCVE-2025-472068.1An out-of-bounds write vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exCVE-2025-472076.5A NULL pointer dereference vulnerability has been reported to affect several product versions. If a remote attacker gains a user account, thCVE-2025-472086.5An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. IfCVE-2025-472096.5A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can thenCVE-2025-47219.8A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue affects some unknown prCVE-2025-472106.5A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can thenCVE-2025-472114.9A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administratCVE-2025-472127.2A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administCVE-2025-472134.9A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an a
CVE-2025-47202: Critical severity, CVSS 9.1 | Vulnix