CVE-2025-47404

HighCVSS 7.8/10Last modified Oct 7, 2026

Description

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120 CWE-787

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	5G Fixed Wireless Access Platform; AR8031; AR8035; C-V2X 9150; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; FWA Gen 3 Ultra Platform; G1 Gen 1; G3x Gen 2; Kalpeni; LeMans_AU_LGIT; LeMansAU; MDM9250; MDM9628

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: May 4, 2026
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-474057.8Memory corruption when processing camera sensor input/output control codes with invalid output buffers.CVE-2025-474065.5Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.CVE-2025-474077.0Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.CVE-2025-474087.8Memory corruption when another driver calls an IOCTL with invalid input/output buffer.CVE-2025-47419.8A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown proces CVE-2025-474108.8Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could allow an attacker who h CVE-2025-474118.1A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that CVE-2025-474156.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CRESTRON TOUCHSCREENS x70 allows Relative Pa CVE-2025-474165.9A vulnerability exists in the ConsoleFindCommandMatchList function in libsymproc. so imported by ctpd that may lead to unauthorized executio CVE-2025-474175.1Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. When Enable CVE-2025-474185.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. There is no v CVE-2025-4741910.0Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows We