First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-47316

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption due to double free when multiple threads race to set the timestamp store.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QCA6391; QCA6420; QCA6430; SC8380XP; Snapdragon 7c+ Gen 3 Compute; Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite"; Snapdragon 8cx Compute Platform (SC8180X-AA, AB); Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro"; Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB); WCD9340; WCD9341; WCD9380; WCD9385; WSA8810

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.htmlVendor Advisory

Timeline

Published: Sep 24, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-473177.8Memory corruption due to global buffer overflow when a test command uses an invalid payload type.CVE-2025-473187.5Transient DOS while parsing the EPTM test control message to get the test pattern.CVE-2025-473196.7Information disclosure while exposing internal TA-to-TA communication APIs to HLOS CVE-2025-47328.8A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown cod CVE-2025-473207.8Memory corruption while processing MFC channel configuration during music playback.CVE-2025-473217.8Memory corruption while copying packets received from unix clients.CVE-2025-473227.8Memory corruption while handling IOCTL calls to set mode.CVE-2025-473237.8Memory corruption while routing GPR packets between user and root when handling large data packet.CVE-2025-473247.5Information disclosure while accessing and modifying the PIB file of a remote device via powerline.CVE-2025-473255.5Information disclosure while processing system calls with invalid parameters.CVE-2025-473267.5Transient DOS while handling command data during power control processing.CVE-2025-473277.8Memory corruption while encoding the image data.