First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-47388

HighCVSS 7.8/10Last modified Oct 7, 2026

Description

Memory corruption while passing pages to DSP with an unaligned starting address.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; QCS610; QMP1000; Qualcomm Video Collaboration VC1 Platform; Qualcomm Video Collaboration VC3 Platform; SG6150; SG6150P; SM6475; SM7435; SM8735; SM8750; SM8750P; Snapdragon 4 Gen 2 Mobile Platform; Snapdragon 6 Gen 1 Mobile Platform; Snapdragon W5+ Gen 1 Wearable Platform; SW5100; SW5100P

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2026-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: Jan 7, 2026
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-473897.8Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.CVE-2025-47399.8A vulnerability was found in projectworlds Hospital Database Management System 1.0. It has been classified as critical. This affects an unkn CVE-2025-473907.8Memory corruption while preprocessing IOCTL request in JPEG driver.CVE-2025-473917.8Memory corruption while processing a frame request from user.CVE-2025-473928.8Memory corruption when decoding corrupted satellite data files with invalid signature offsets.CVE-2025-473937.8Memory corruption when accessing resources in kernel driver.CVE-2025-473947.8Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.CVE-2025-473956.5Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.CVE-2025-473967.8Memory corruption occurs when a secure application is launched on a device with insufficient memory.CVE-2025-473977.8Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.CVE-2025-473987.8Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.CVE-2025-473997.8Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.

CVE-2025-47388: High severity, CVSS 7.8 | Vulnix