medium CVSS: 6.5/10 11/05/2026

Vulnérabilité medium détectée - CVE-2025-47404

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

CVE concernées (1)

Systèmes affectés

  • 215_mobile
  • 215_mobile_firmware
  • 5g_fixed_wireless_access
  • 5g_fixed_wireless_access_firmware
  • ar8031
  • ar8031_firmware
  • ar8035
  • ar8035_firmware
  • c-v2x_9150
  • c-v2x_9150_firmware
  • csra6620
  • csra6620_firmware
  • csra6640
  • csra6640_firmware
  • fastconnect_6200
  • fastconnect_6200_firmware
  • fastconnect_6700
  • fastconnect_6700_firmware
  • fastconnect_6800
  • fastconnect_6800_firmware
  • fastconnect_6900
  • fastconnect_6900_firmware
  • fastconnect_7800
  • fastconnect_7800_firmware
  • flight_rb5_5g
  • flight_rb5_5g_firmware
  • fwa_gen_3_ultra
  • fwa_gen_3_ultra_firmware
  • g1_gen_1
  • g1_gen_1_firmware
  • g3x_gen_2
  • g3x_gen_2_firmware
  • kalpeni
  • kalpeni_firmware
  • lemans_au_lgit
  • lemans_au_lgit_firmware
  • lemansau
  • lemansau_firmware
  • mdm9250
  • mdm9250_firmware
  • mdm9628
  • mdm9628_firmware
  • milos
  • milos_firmware
  • milos_iot
  • milos_iot_firmware
  • qam8255p
  • qam8255p_firmware
  • qam8295p
  • qam8295p_firmware
  • qamsrv1h
  • qamsrv1h_firmware
  • qamsrv1m
  • qamsrv1m_firmware
  • qca2066
  • qca2066_firmware
  • qca6174a
  • qca6174a_firmware
  • qca6391
  • qca6391_firmware
  • qca6564a
  • qca6564a_firmware
  • qca6564au
  • qca6564au_firmware
  • qca6574
  • qca6574_firmware
  • qca6574a
  • qca6574a_firmware
  • qca6574au
  • qca6574au_firmware
  • qca6584au
  • qca6584au_firmware
  • qca6595
  • qca6595_firmware
  • qca6595au
  • qca6595au_firmware
  • qca6678aq
  • qca6678aq_firmware
  • qca6688aq
  • qca6688aq_firmware
  • qca6696
  • qca6696_firmware
  • qca6698aq
  • qca6698aq_firmware
  • qca6698au
  • qca6698au_firmware
  • qca6797aq
  • qca6797aq_firmware
  • qca8081
  • qca8081_firmware
  • qca8337
  • qca8337_firmware
  • qca8695au
  • qca8695au_firmware
  • qca9367
  • qca9367_firmware
  • qca9377
  • qca9377_firmware
  • qcc710
  • qcc710_firmware
  • qcm2290
  • qcm2290_firmware
  • qcm4325
  • qcm4325_firmware
  • qcm5430
  • qcm5430_firmware
  • qcm6125
  • qcm6125_firmware
  • qcm6490
  • qcm6490_firmware
  • qcn6224
  • qcn6224_firmware
  • qcn6274
  • qcn6274_firmware
  • qcn9011
  • qcn9011_firmware
  • qcn9012
  • qcn9012_firmware
  • qcs2290
  • qcs2290_firmware
  • qcs4290
  • qcs4290_firmware
  • qcs6690
  • qcs6690_firmware
  • qcs8550
  • qcs8550_firmware
  • qep8111
  • qep8111_firmware
  • qfw7114
  • qfw7114_firmware
  • qfw7124
  • qfw7124_firmware
  • qrb5165m
  • qrb5165m_firmware
  • qrb5165n
  • qrb5165n_firmware
  • qualcomm
  • robotics_rb2
  • robotics_rb2_firmware
  • robotics_rb5
  • robotics_rb5_firmware
  • sa2150p
  • sa2150p_firmware
  • sa4150p
  • sa4150p_firmware
  • sa4155p
  • sa4155p_firmware
  • sa6145p
  • sa6145p_firmware
  • sa6150p
  • sa6150p_firmware
  • sa6155
  • sa6155_firmware
  • sa6155p
  • sa6155p_firmware
  • sa7255p
  • sa7255p_firmware
  • sa7775p
  • sa7775p_firmware
  • sa8145p
  • sa8145p_firmware
  • sa8150p
  • sa8150p_firmware
  • sa8155
  • sa8155_firmware
  • sa8155p
  • sa8155p_firmware
  • sa8195p
  • sa8195p_firmware
  • sa8255p
  • sa8255p_firmware
  • sa8295p
  • sa8295p_firmware
  • sa8620p
  • sa8620p_firmware
  • sa8770p
  • sa8770p_firmware
  • sa9000p
  • sa9000p_firmware
  • sd662
  • sd662_firmware
  • sd865_5g
  • sd865_5g_firmware
  • sda660
  • sda660_firmware
  • sm6225p
  • sm6225p_firmware
  • sm6650p
  • sm6650p_firmware
  • sm7325p
  • sm7325p_firmware
  • sm7525
  • sm7525_firmware
  • sm7550
  • sm7550_firmware
  • sm7550p
  • sm7550p_firmware
  • sm7635p
  • sm7635p_firmware
  • sm7675
  • sm7675_firmware
  • sm7675p
  • sm7675p_firmware
  • sm8550p
  • sm8550p_firmware
  • sm8635
  • sm8635_firmware
  • sm8635p
  • sm8635p_firmware
  • sm8650q
  • sm8650q_firmware
  • smart_audio_400
  • smart_audio_400_firmware
  • snapdragon_460_mobile
  • snapdragon_460_mobile_firmware
  • snapdragon_480\+_5g_mobile
  • snapdragon_480\+_5g_mobile_firmware
  • snapdragon_480_5g_mobile
  • snapdragon_480_5g_mobile_firmware
  • snapdragon_4_gen_1_mobile
  • snapdragon_4_gen_1_mobile_firmware
  • snapdragon_660_mobile
  • snapdragon_660_mobile_firmware
  • snapdragon_662_mobile
  • snapdragon_662_mobile_firmware
  • snapdragon_680_4g_mobile
  • snapdragon_680_4g_mobile_firmware
  • snapdragon_685_4g_mobile
  • snapdragon_685_4g_mobile_firmware
  • snapdragon_690_5g_mobile
  • snapdragon_690_5g_mobile_firmware
  • snapdragon_695_5g_mobile
  • snapdragon_695_5g_mobile_firmware
  • snapdragon_6_gen_4_mobile
  • snapdragon_6_gen_4_mobile_firmware
  • snapdragon_778g\+_5g_mobile
  • snapdragon_778g\+_5g_mobile_firmware
  • snapdragon_778g_5g_mobile
  • snapdragon_778g_5g_mobile_firmware
  • snapdragon_782g_mobile
  • snapdragon_782g_mobile_firmware
  • snapdragon_7c\+_gen_3_compute
  • snapdragon_7c\+_gen_3_compute_firmware
  • snapdragon_7s_gen_3_mobile
  • snapdragon_7s_gen_3_mobile_firmware
  • snapdragon_865\+_5g_mobile
  • snapdragon_865\+_5g_mobile_firmware
  • snapdragon_865_5g_mobile
  • snapdragon_865_5g_mobile_firmware
  • snapdragon_870_5g_mobile
  • snapdragon_870_5g_mobile_firmware
  • snapdragon_888\+_5g_mobile
  • snapdragon_888\+_5g_mobile_firmware
  • snapdragon_888_5g_mobile
  • snapdragon_888_5g_mobile_firmware
  • snapdragon_8\+_gen_2_mobile
  • snapdragon_8\+_gen_2_mobile_firmware
  • snapdragon_8_gen_2_mobile
  • snapdragon_8_gen_2_mobile_firmware
  • snapdragon_8_gen_3_mobile
  • snapdragon_8_gen_3_mobile_firmware
  • snapdragon_auto_4g_modem
  • snapdragon_auto_4g_modem_firmware
  • snapdragon_auto_5g_modem-rf
  • snapdragon_auto_5g_modem-rf_firmware
  • snapdragon_auto_5g_modem-rf_gen_2
  • snapdragon_auto_5g_modem-rf_gen_2_firmware
  • snapdragon_w5\+_gen_1_wearable
  • snapdragon_w5\+_gen_1_wearable_firmware
  • snapdragon_x12_lte_modem
  • snapdragon_x12_lte_modem_firmware
  • snapdragon_x32_5g_modem-rf
  • snapdragon_x32_5g_modem-rf_firmware
  • snapdragon_x35_5g_modem-rf
  • snapdragon_x35_5g_modem-rf_firmware
  • snapdragon_x53_5g_modem-rf
  • snapdragon_x53_5g_modem-rf_firmware
  • snapdragon_x55_5g_modem-rf
  • snapdragon_x55_5g_modem-rf_firmware
  • snapdragon_x72_5g_modem-rf
  • snapdragon_x72_5g_modem-rf_firmware
  • snapdragon_x75_5g_modem-rf
  • snapdragon_x75_5g_modem-rf_firmware
  • snapdragon_xr2\+_gen_1
  • snapdragon_xr2\+_gen_1_firmware
  • snapdragon_xr2_5g
  • snapdragon_xr2_5g_firmware
  • srv1h
  • srv1h_firmware
  • srv1m
  • srv1m_firmware
  • sw5100
  • sw5100_firmware
  • sw5100p
  • sw5100p_firmware
  • sxr2230p
  • sxr2230p_firmware
  • sxr2250p
  • sxr2250p_firmware
  • sxr2330p
  • sxr2330p_firmware
  • sxr2350p
  • sxr2350p_firmware
  • video_collaboration_vc1
  • video_collaboration_vc1_firmware
  • video_collaboration_vc3
  • video_collaboration_vc3_firmware
  • video_collaboration_vc5
  • video_collaboration_vc5_firmware
  • wcd9326
  • wcd9326_firmware
  • wcd9335
  • wcd9335_firmware
  • wcd9340
  • wcd9340_firmware
  • wcd9341
  • wcd9341_firmware
  • wcd9360
  • wcd9360_firmware
  • wcd9370
  • wcd9370_firmware
  • wcd9371
  • wcd9371_firmware
  • wcd9375
  • wcd9375_firmware
  • wcd9378
  • wcd9378_firmware
  • wcd9380
  • wcd9380_firmware
  • wcd9385
  • wcd9385_firmware
  • wcd9390
  • wcd9390_firmware
  • wcd9395
  • wcd9395_firmware
  • wcn3615
  • wcn3615_firmware
  • wcn3660b
  • wcn3660b_firmware
  • wcn3680b
  • wcn3680b_firmware
  • wcn3910
  • wcn3910_firmware
  • wcn3950
  • wcn3950_firmware
  • wcn3980
  • wcn3980_firmware
  • wcn3988
  • wcn3988_firmware
  • wcn3990
  • wcn3990_firmware
  • wcn6450
  • wcn6450_firmware
  • wcn6650
  • wcn6650_firmware
  • wcn6755
  • wcn6755_firmware
  • wcn7861
  • wcn7861_firmware
  • wcn7881
  • wcn7881_firmware
  • wsa8810
  • wsa8810_firmware
  • wsa8815
  • wsa8815_firmware
  • wsa8830
  • wsa8830_firmware
  • wsa8832
  • wsa8832_firmware
  • wsa8835
  • wsa8835_firmware
  • wsa8840
  • wsa8840_firmware
  • wsa8845
  • wsa8845_firmware
  • wsa8845h
  • wsa8845h_firmware

Description

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

Type de vulnérabilité

  • CWE-120
  • CWE-787

Vecteur d'attaque

Complexité : HIGH

Privilèges requis : LOW

Interaction utilisateur : NONE

Impact

  • Confidentialité : HIGH
  • Intégrité : HIGH
  • Disponibilité : LOW

Recommandations

Appliquer les correctifs de sécurité fournis par le vendeur dès que possible.

Recommandations de sécurité

  • Appliquer immédiatement les correctifs de sécurité
  • Surveiller les systèmes pour détecter toute tentative d'exploitation

Références et sources