First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-47324

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Information disclosure while accessing and modifying the PIB file of a remote device via powerline.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	QCA7005

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.htmlVendor Advisory

Timeline

Published: Aug 6, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-473255.5Information disclosure while processing system calls with invalid parameters.CVE-2025-473267.5Transient DOS while handling command data during power control processing.CVE-2025-473277.8Memory corruption while encoding the image data.CVE-2025-473287.5Transient DOS while processing power control requests with invalid antenna or stream values.CVE-2025-473297.8Memory corruption while handling invalid inputs in application info setup.CVE-2025-47338.8A vulnerability, which was classified as critical, has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This issue affects so CVE-2025-473305.5Transient DOS while parsing video packets received from the video firmware.CVE-2025-473316.1Information disclosure while processing a firmware event.CVE-2025-473326.4Memory corruption while processing a config call from userspace.CVE-2025-473336.6Memory corruption while handling buffer mapping operations in the cryptographic driver.CVE-2025-473346.7Memory corruption while processing shared command buffer packet between camera userspace and kernel.CVE-2025-473356.7Memory corruption while parsing clock configuration data for a specific hardware type.

CVE-2025-47324: High severity, CVSS 7.5 | Vulnix