CVE-2025-47404Medium· 6.5▾ SunlitMemory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.07%
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
qca8695au_firmwareqca9367_firmwareqca9377_firmwareqcc710_firmwareqcm2290_firmwareqcm4325_firmwareqcm5430_firmwareqcm6125_firmwareqcm6490_firmwareqcn6224_firmwareqcn6274_firmwareqcn9011_firmwareqcn9012_firmwareqcs2290_firmwareqcs4290_firmwareqcs6690_firmwareqcs8550_firmwareqep8111_firmwareqfw7114_firmwareqfw7124_firmwareqrb5165m_firmwareqrb5165n_firmware215_mobile_firmwarevideo_collaboration_vc1_firmwarevideo_collaboration_vc3_firmwarevideo_collaboration_vc5_firmwarerobotics_rb2_firmwarerobotics_rb5_firmwaresa2150p_firmwaresa4150p_firmwaresa4155p_firmwaresa6145p_firmwaresa6150p_firmwaresa6155_firmwaresa6155p_firmwaresa7255p_firmwaresa7775p_firmwaresa8145p_firmwaresa8150p_firmwaresa8155_firmware5g_fixed_wireless_access_firmwarear8031_firmwarear8035_firmwarec-v2x_9150_firmwarecsra6620_firmwarecsra6640_firmwarefastconnect_6200_firmwarefastconnect_6700_firmwarefastconnect_6800_firmwarefastconnect_6900_firmwarefastconnect_7800_firmwareflight_rb5_5g_firmwarefwa_gen_3_ultra_firmwareg1_gen_1_firmwareg3x_gen_2_firmwarekalpeni_firmwarelemans_au_lgit_firmwarelemansau_firmwaremdm9250_firmwaremdm9628_firmwaremilos_firmwaremilos_iot_firmwareqam8255p_firmwareqam8295p_firmwareqamsrv1h_firmwareqamsrv1m_firmwareqca2066_firmwareqca6174a_firmwareqca6391_firmwareqca6564a_firmwareqca6564au_firmwareqca6574_firmwareqca6574a_firmwareqca6574au_firmwareqca6584au_firmwareqca6595_firmwareqca6595au_firmwareqca6678aq_firmwareqca6688aq_firmwareqca6696_firmwareqca6698aq_firmwareqca6698au_firmwareqca6797aq_firmwareqca8081_firmwareqca8337_firmwarewcd9390_firmwarewcd9395_firmwarewcn3615_firmwarewcn3660b_firmwarewcn3680b_firmwarewcn3910_firmwarewcn3950_firmwarewcn3980_firmwarewcn3988_firmwarewcn3990_firmwarewcn6450_firmwarewcn6650_firmwarewcn6755_firmwarewcn7861_firmwarewcn7881_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-47408High· 7.8Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
CVE-2025-47407High· 7.8Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
CVE-2025-47406Medium· 6.1Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.
CVE-2025-47405High· 7.8Memory corruption when processing camera sensor input/output control codes with invalid output buffers.
CVE-2025-47403Medium· 6.5Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
CVE-2025-47401Medium· 6.5Transient DOS when processing target power rate tables during channel configuration.