CVE-2025-47368
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-04

Last updated on: 2025-11-05

Assigner: Qualcomm, Inc.

Description
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-04
Last Modified
2025-11-05
Generated
2026-06-16
AI Q&A
2025-11-04
EPSS Evaluated
2026-06-15
NVD
CVE-2025-47368
EUVD
EUVD-2025-37606
Affected Vendors & Products
Showing 16 associated CPEs
Vendor Product Version / Range
qualcomm fastconnect_6900_firmware *
qualcomm fastconnect_6900 *
qualcomm fastconnect_7800_firmware *
qualcomm fastconnect_7800 *
qualcomm sc8380xp_firmware *
qualcomm sc8380xp *
qualcomm wcd9380_firmware *
qualcomm wcd9380 *
qualcomm wcd9385_firmware *
qualcomm wcd9385 *
qualcomm wsa8840_firmware *
qualcomm wsa8840 *
qualcomm wsa8845_firmware *
qualcomm wsa8845 *
qualcomm wsa8845h_firmware *
qualcomm wsa8845h *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-126 The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a memory corruption issue that occurs when the system dereferences an invalid userspace address in a user buffer during MCDM IOCTL processing. This means that improper handling of user-provided memory addresses can lead to corruption of memory, potentially causing unexpected behavior or crashes.

Impact Analysis

The vulnerability can have a high impact as it allows memory corruption, which can lead to confidentiality, integrity, and availability issues. An attacker with limited privileges could exploit this to cause system crashes, execute arbitrary code, or gain elevated privileges.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-47368. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart