CVE-2025-47369

MediumCVSS 5.5/10Last modified Oct 7, 2026

Description

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Jan 7, 2026
Last modified
Oct 7, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-47376.2Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive informatiCVE-2025-473706.5Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.CVE-2025-473716.5Transient DOS when an LTE RLC packet with invalid TB is received by UE.CVE-2025-473728.4Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.CVE-2025-473737.8Memory Corruption when accessing buffers with invalid length during TA invocation.CVE-2025-473746.5Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.CVE-2025-473757.8Memory corruption while handling different IOCTL calls from the user-space simultaneously.CVE-2025-473767.8Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.CVE-2025-473777.8Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.CVE-2025-473787.1Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.CVE-2025-473797.8Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffCVE-2025-47389.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yirmibes Software MY ERP allows SQL In
CVE-2025-47369: Medium severity, CVSS 5.5 | Vulnix