CVE-2025-47404Medium· 6.5▾ SunlitMemory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.07%
Last analysed / modified upstream
0.07% → 0.10%
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
qca8695au_firmwareqca9367_firmwareqca9377_firmwareqcc710_firmwareqcm2290_firmwareqcm4325_firmwareqcm5430_firmwareqcm6125_firmwareqcm6490_firmwareqcn6224_firmwareqcn6274_firmwareqcn9011_firmwareqcn9012_firmwareqcs2290_firmwareqcs4290_firmwareqcs6690_firmwareqcs8550_firmwareqep8111_firmwareqfw7114_firmwareqfw7124_firmwareqrb5165m_firmwareqrb5165n_firmware215_mobile_firmwarevideo_collaboration_vc1_firmwarevideo_collaboration_vc3_firmwarevideo_collaboration_vc5_firmwarerobotics_rb2_firmwarerobotics_rb5_firmwaresa2150p_firmwaresa4150p_firmwaresa4155p_firmwaresa6145p_firmwaresa6150p_firmwaresa6155_firmwaresa6155p_firmwaresa7255p_firmwaresa7775p_firmwaresa8145p_firmwaresa8150p_firmwaresa8155_firmware5g_fixed_wireless_access_firmwarear8031_firmwarear8035_firmwarec-v2x_9150_firmwarecsra6620_firmwarecsra6640_firmwarefastconnect_6200_firmwarefastconnect_6700_firmwarefastconnect_6800_firmwarefastconnect_6900_firmwarefastconnect_7800_firmwareflight_rb5_5g_firmwarefwa_gen_3_ultra_firmwareg1_gen_1_firmwareg3x_gen_2_firmwarekalpeni_firmwarelemans_au_lgit_firmwarelemansau_firmwaremdm9250_firmwaremdm9628_firmwaremilos_firmwaremilos_iot_firmwareqam8255p_firmwareqam8295p_firmwareqamsrv1h_firmwareqamsrv1m_firmwareqca2066_firmwareqca6174a_firmwareqca6391_firmwareqca6564a_firmwareqca6564au_firmwareqca6574_firmwareqca6574a_firmwareqca6574au_firmwareqca6584au_firmwareqca6595_firmwareqca6595au_firmwareqca6678aq_firmwareqca6688aq_firmwareqca6696_firmwareqca6698aq_firmwareqca6698au_firmwareqca6797aq_firmwareqca8081_firmwareqca8337_firmwarewcd9390_firmwarewcd9395_firmwarewcn3615_firmwarewcn3660b_firmwarewcn3680b_firmwarewcn3910_firmwarewcn3950_firmwarewcn3980_firmwarewcn3988_firmwarewcn3990_firmwarewcn6450_firmwarewcn6650_firmwarewcn6755_firmwarewcn7861_firmwarewcn7881_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-47355High· 7.8Memory corruption while invoking remote procedure IOCTL calls.
CVE-2025-47341High· 7.8memory corruption while processing an image encoding completion event.
CVE-2025-47340High· 7.8Memory corruption while processing IOCTL call to get the mapping.
CVE-2025-27054High· 7.8Memory corruption while processing a malformed license file during reboot.
CVE-2026-25273Medium· 6.7Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
CVE-2026-25272Medium· 6.7Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.