CVE-2025-47408High· 7.8▾ TwilightMemory corruption when another driver calls an IOCTL with invalid input/output buffer.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.07%
Last analysed / modified upstream
0.07% → 0.1%
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
fastconnect_6200_firmwarefastconnect_6900_firmwarefastconnect_7800_firmwareiqx5121_firmwareiqx7181_firmwareqca0000_firmwaresc8380xp_firmwaresd865_5g_firmwaresm6250_firmwaresnapdragon_7c_compute_firmwaresnapdragon_7c_gen_2_compute_firmwaresnapdragon_xr2_5g_firmwaresnapdragon_xr2+_gen_1_firmwarewcd9380_firmwarewcd9385_firmwarewsa8810_firmwarewsa8815_firmwarewsa8840_firmwarewsa8845_firmwarewsa8845h_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-47405High· 7.8Memory corruption when processing camera sensor input/output control codes with invalid output buffers.
CVE-2025-47401Medium· 6.5Transient DOS when processing target power rate tables during channel configuration.
CVE-2025-47354High· 7.8Memory corruption while allocating buffers in DSP service.
CVE-2025-47351High· 7.8Memory corruption while processing user buffers.
CVE-2025-47338High· 7.8Memory corruption while processing escape commands from userspace.
CVE-2025-27060High· 8.8Memory corruption while performing SCM call with malformed inputs.