First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-47344

MediumCVSS 6.4/10Last modified Oct 7, 2026

Description

Memory corruption while handling sensor utility operations.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; QCA6574; QCA6574A; QCA6574AU; QCA6595AU; QCA6696; QCA6698AQ; QCM4490; QCM5430; QCM6490; QCS4490; QCS5430; QCS615; QCS6490; QCS8550

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2026-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: Jan 7, 2026
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-473458.4Cryptographic issue may occur while encrypting license data.CVE-2025-473467.8Memory corruption while processing a secure logging command in the trusted application.CVE-2025-473477.8Memory corruption while processing control commands in the virtual memory management interface.CVE-2025-473487.8Memory corruption while processing identity credential operations in the trusted application.CVE-2025-473497.8Memory corruption while processing an escape call.CVE-2025-47358.8A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an CVE-2025-473507.8Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.CVE-2025-473517.8Memory corruption while processing user buffers.CVE-2025-473527.8Memory corruption while processing audio streaming operations.CVE-2025-473537.8Memory corruption while processing request sent from GVM.CVE-2025-473547.8Memory corruption while allocating buffers in DSP service.CVE-2025-473557.8Memory corruption while invoking remote procedure IOCTL calls.

CVE-2025-47344: Medium severity, CVSS 6.4 | Vulnix