First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-47387

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory Corruption when processing IOCTLs for JPEG data without verification.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QCA6391; QCA6420; QCA6430; QCM5430; QCM6490; QCS5430; QCS6490; Qualcomm Video Collaboration VC3 Platform; SC8180X+SDX55; SC8380XP; SM6250; Snapdragon 7c Compute Platform (SC7180-AC); Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) "Rennell Pro"; Snapdragon 7c+ Gen 3 Compute

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.htmlVendor Advisory

Timeline

Published: Dec 18, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-473887.8Memory corruption while passing pages to DSP with an unaligned starting address.CVE-2025-473897.8Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.CVE-2025-47399.8A vulnerability was found in projectworlds Hospital Database Management System 1.0. It has been classified as critical. This affects an unkn CVE-2025-473907.8Memory corruption while preprocessing IOCTL request in JPEG driver.CVE-2025-473917.8Memory corruption while processing a frame request from user.CVE-2025-473928.8Memory corruption when decoding corrupted satellite data files with invalid signature offsets.CVE-2025-473937.8Memory corruption when accessing resources in kernel driver.CVE-2025-473947.8Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.CVE-2025-473956.5Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.CVE-2025-473967.8Memory corruption occurs when a secure application is launched on a device with insufficient memory.CVE-2025-473977.8Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.CVE-2025-473987.8Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.

CVE-2025-47387: High severity, CVSS 7.8 | Vulnix