---
id: CVE-2025-47334
title: >-
  Memory corruption while processing shared command buffer packet between camera
  userspace and kernel.
summary: >-
  Memory corruption while processing shared command buffer packet between camera
  userspace and kernel.
severity: medium
cvss: 6.7
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-120
vendor: qualcomm
product: csra6620_firmware
affected:
  - csra6620_firmware
  - csra6640_firmware
  - fastconnect_6200_firmware
  - fastconnect_6700_firmware
  - fastconnect_6900_firmware
  - sa7255p_firmware
  - sa7775p_firmware
  - sa8255p_firmware
  - sa8620p_firmware
  - sa8650p_firmware
  - sa8770p_firmware
  - sa8775p_firmware
  - sa9000p_firmware
  - sd_8_gen1_5g_firmware
  - sg4150p_firmware
  - sg8275_firmware
  - sg8275p_firmware
  - sm4635_firmware
  - sm6225p_firmware
  - sm6475_firmware
  - sm6650_firmware
  - sm6650p_firmware
  - sm7325p_firmware
  - sm7435_firmware
  - sm7550_firmware
  - sm7550p_firmware
  - sm7635_firmware
  - sm7635p_firmware
  - sm7675_firmware
  - sm7675p_firmware
  - sm8475p_firmware
  - sm8550p_firmware
  - sm8635_firmware
  - sm8635p_firmware
  - sm8650q_firmware
  - sm8735_firmware
  - sm8750_firmware
  - sm8750p_firmware
  - smart_audio_400_platform_firmware
  - snapdragon_4_gen_1_mobile_platform_firmware
  - snapdragon_4_gen_2_mobile_platform_firmware
  - snapdragon_460_mobile_platform_firmware
  - snapdragon_480_5g_mobile_platform_firmware
  - snapdragon_480+_5g_mobile_platform_(sm4350-ac)_firmware
  - snapdragon_6_gen_1_mobile_platform_firmware
  - fastconnect_7800_firmware
  - flight_rb5_5g_platform_firmware
  - qam8255p_firmware
  - qam8650p_firmware
  - qam8775p_firmware
  - qamsrv1h_firmware
  - qamsrv1m_firmware
  - qca6391_firmware
  - qca6595_firmware
  - qca6595au_firmware
  - qca6678aq_firmware
  - qca6698aq_firmware
  - qca6698au_firmware
  - qca6797aq_firmware
  - qcm2290_firmware
  - qcm4490_firmware
  - qcm5430_firmware
  - qcm6490_firmware
  - qcm8550_firmware
  - qcn9011_firmware
  - qcn9012_firmware
  - qcs2290_firmware
  - qcs410_firmware
  - qcs4490_firmware
  - qcs5430_firmware
  - snapdragon_7c+_gen_3_compute_firmware
  - snapdragon_8_gen_1_mobile_platform_firmware
  - snapdragon_8_gen_2_mobile_platform_firmware
  - snapdragon_8_gen_3_mobile_platform_firmware
  - snapdragon_8+_gen_1_mobile_platform_firmware
  - snapdragon_8+_gen_2_mobile_platform_firmware
  - snapdragon_888_5g_mobile_platform_firmware
  - snapdragon_888+_5g_mobile_platform_(sm8350-ac)_firmware
  - snapdragon_ar1_gen_1_platform_firmware
  - snapdragon_ar1_gen_1_platform_"luna1"_firmware
  - snapdragon_ar2_gen_1_platform_firmware
  - snapdragon_w5+_gen_1_wearable_platform_firmware
  - srv1h_firmware
  - srv1m_firmware
  - ssg2115p_firmware
  - ssg2125p_firmware
  - sw5100_firmware
  - sw5100p_firmware
  - sxr1230p_firmware
  - sxr2230p_firmware
  - sxr2250p_firmware
  - sxr2330p_firmware
  - sxr2350p_firmware
  - wcd9335_firmware
  - wcd9370_firmware
  - wcd9371_firmware
  - wcd9375_firmware
  - wcd9378_firmware
  - wcd9380_firmware
  - wcd9385_firmware
published: '2026-01-07'
updated: '2026-09-30'
sourceUpdated: '2026-09-30T22:10:00.273'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-47334'
references:
  - url: >-
      https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2026-bulletin.html
    label: product-security@qualcomm.com
tags:
  - nvd
epss: 0.00083
epssPercentile: 0.00216
ingestedAt: '2026-09-30T22:27:27.722Z'
---

## Overview

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

## Affected

- `csra6620_firmware`
- `csra6640_firmware`
- `fastconnect_6200_firmware`
- `fastconnect_6700_firmware`
- `fastconnect_6900_firmware`
- `sa7255p_firmware`
- `sa7775p_firmware`
- `sa8255p_firmware`
- `sa8620p_firmware`
- `sa8650p_firmware`
- `sa8770p_firmware`
- `sa8775p_firmware`
- `sa9000p_firmware`
- `sd_8_gen1_5g_firmware`
- `sg4150p_firmware`
- `sg8275_firmware`
- `sg8275p_firmware`
- `sm4635_firmware`
- `sm6225p_firmware`
- `sm6475_firmware`
- `sm6650_firmware`
- `sm6650p_firmware`
- `sm7325p_firmware`
- `sm7435_firmware`
- `sm7550_firmware`
- `sm7550p_firmware`
- `sm7635_firmware`
- `sm7635p_firmware`
- `sm7675_firmware`
- `sm7675p_firmware`
- `sm8475p_firmware`
- `sm8550p_firmware`
- `sm8635_firmware`
- `sm8635p_firmware`
- `sm8650q_firmware`
- `sm8735_firmware`
- `sm8750_firmware`
- `sm8750p_firmware`
- `smart_audio_400_platform_firmware`
- `snapdragon_4_gen_1_mobile_platform_firmware`
- `snapdragon_4_gen_2_mobile_platform_firmware`
- `snapdragon_460_mobile_platform_firmware`
- `snapdragon_480_5g_mobile_platform_firmware`
- `snapdragon_480+_5g_mobile_platform_(sm4350-ac)_firmware`
- `snapdragon_6_gen_1_mobile_platform_firmware`
- `fastconnect_7800_firmware`
- `flight_rb5_5g_platform_firmware`
- `qam8255p_firmware`
- `qam8650p_firmware`
- `qam8775p_firmware`
- `qamsrv1h_firmware`
- `qamsrv1m_firmware`
- `qca6391_firmware`
- `qca6595_firmware`
- `qca6595au_firmware`
- `qca6678aq_firmware`
- `qca6698aq_firmware`
- `qca6698au_firmware`
- `qca6797aq_firmware`
- `qcm2290_firmware`
- `qcm4490_firmware`
- `qcm5430_firmware`
- `qcm6490_firmware`
- `qcm8550_firmware`
- `qcn9011_firmware`
- `qcn9012_firmware`
- `qcs2290_firmware`
- `qcs410_firmware`
- `qcs4490_firmware`
- `qcs5430_firmware`
- `snapdragon_7c+_gen_3_compute_firmware`
- `snapdragon_8_gen_1_mobile_platform_firmware`
- `snapdragon_8_gen_2_mobile_platform_firmware`
- `snapdragon_8_gen_3_mobile_platform_firmware`
- `snapdragon_8+_gen_1_mobile_platform_firmware`
- `snapdragon_8+_gen_2_mobile_platform_firmware`
- `snapdragon_888_5g_mobile_platform_firmware`
- `snapdragon_888+_5g_mobile_platform_(sm8350-ac)_firmware`
- `snapdragon_ar1_gen_1_platform_firmware`
- `snapdragon_ar1_gen_1_platform_"luna1"_firmware`
- `snapdragon_ar2_gen_1_platform_firmware`
- `snapdragon_w5+_gen_1_wearable_platform_firmware`
- `srv1h_firmware`
- `srv1m_firmware`
- `ssg2115p_firmware`
- `ssg2125p_firmware`
- `sw5100_firmware`
- `sw5100p_firmware`
- `sxr1230p_firmware`
- `sxr2230p_firmware`
- `sxr2250p_firmware`
- `sxr2330p_firmware`
- `sxr2350p_firmware`
- `wcd9335_firmware`
- `wcd9370_firmware`
- `wcd9371_firmware`
- `wcd9375_firmware`
- `wcd9378_firmware`
- `wcd9380_firmware`
- `wcd9385_firmware`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.