Search/CVE-2025-47404
● CVE — Medium

CVE-2025-47404

VendorqualcommProductqca9377 firmware, qcm6125 firmware, qcs4290 firmware, qcm2290 firmware, qcs2290 firmware, qca9367 firmware, qcm6490 firmware, qrb5165n firmware, qcn9011 firmware, qcn9012 firmware, qrb5165m firmware, qcc710 firmware, qcm4325 firmware, qcs8550 firmware, qcn6224 firmware, qcn6274 firmware, qfw7114 firmware, qfw7124 firmware, qep8111 firmware, qcm5430 firmware, qcs6690 firmware, qca8695au firmware, video collaboration vc3 firmware, video collaboration vc1 firmware, 215 mobile firmwareDiscoveredMay 4, 2026UpdatedOct 7, 2026

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

CVSS v3.1
6.5 MEDIUM
EPSS
0.07%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityHIGH
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityLOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
Connections
27 relationships
Timeline
disclosure → media coverage
May 4, 2026
Disclosure — published as a CVE record. · last revised by NVD Oct 7, 2026