CVE-2025-47398

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8031; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; G1 Gen 1; G2 Gen 1; IQ6 Series Platform; IQ8 Series Platform; IQ9 Series Platform; LeMans_AU_LGIT; LeMansAU; Milos; Monaco_IOT; Netrani; Orne; Palawan25

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2026-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: Feb 2, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-473997.8Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.CVE-2025-47405.3A vulnerability was found in BeamCtrl Airiana up to 11.0. It has been declared as problematic. This vulnerability affects unknown code of th CVE-2025-474007.1Cryptographic issue while copying data to a destination buffer without validating its size.CVE-2025-474017.5Transient DOS when processing target power rate tables during channel configuration.CVE-2025-474026.5Transient DOS when processing a received frame with an excessively large authentication information element.CVE-2025-474037.5Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.CVE-2025-474047.8Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.CVE-2025-474057.8Memory corruption when processing camera sensor input/output control codes with invalid output buffers.CVE-2025-474065.5Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.CVE-2025-474077.0Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.CVE-2025-474087.8Memory corruption when another driver calls an IOCTL with invalid input/output buffer.CVE-2025-47419.8A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown proces