CVE-2025-47334
MEDIUM
2026-01-07
[email protected]
6.7
CVSS 3.1
Share
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Lifecycle Timeline
3
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
Patch Released
Jan 27, 2026 - 22:03 nvd
Patch available
CVE Published
Jan 07, 2026 - 12:17 nvd
MEDIUM 6.7
Tags
Linux
Memory Corruption
Sm8635p Firmware
Wcn7881 Firmware
Sm6650 Firmware
Sd 8 Gen1 5g Firmware
Qcs410 Firmware
Sm8750 Firmware
Wcd9370 Firmware
Sa8775p Firmware
Sg4150p Firmware
Snapdragon 4 Gen 2 Mobile Platform Firmware
Qrb5165n Firmware
Qcm6490 Firmware
Wcd9335 Firmware
Qca6698aq Firmware
Snapdragon Ar2 Gen 1 Platform Firmware
Sm7675p Firmware
Qcs2290 Firmware
Sxr2250p Firmware
Wsa8840 Firmware
Sa7255p Firmware
Ssg2125p Firmware
Sm8635 Firmware
Snapdragon 8 Gen 1 Mobile Platform Firmware
Wcn3988 Firmware
Csra6640 Firmware
Sm6475 Firmware
Ssg2115p Firmware
Qca6391 Firmware
Wcd9380 Firmware
Sa8620p Firmware
Wcn6755 Firmware
Sxr2330p Firmware
Snapdragon 6 Gen 1 Mobile Platform Firmware
Qca6698au Firmware
Video Collaboration Vc5 Platform Firmware
Qmp1000 Firmware
Wcn6650 Firmware
Robotics Rb2 Platform Firmware
Qcs9100 Firmware
Wcn3980 Firmware
Sw5100p Firmware
Sm7635 Firmware
Wcd9395 Firmware
Sm7550p Firmware
Sa8255p Firmware
Snapdragon 7 Gen 1 Mobile Platform Firmware
Wsa8845 Firmware
Srv1h Firmware
Snapdragon 480 5g Mobile Platform Firmware
Qca6595 Firmware
Srv1m Firmware
Sxr2350p Firmware
Snapdragon 680 4g Mobile Platform Firmware
Csra6620 Firmware
Snapdragon 4 Gen 1 Mobile Platform Firmware
Snapdragon 695 5g Mobile Platform Firmware
Qcm8550 Firmware
Wcn7880 Firmware
Qcm4490 Firmware
Sm8550p Firmware
Flight Rb5 5g Platform Firmware
Qcs615 Firmware
Video Collaboration Vc3 Platform Firmware
Wsa8845h Firmware
Qcs4490 Firmware
Qrb5165m Firmware
Qcm2290 Firmware
Qcs6490 Firmware
Snapdragon Ar1 Gen 1 Platform Firmware
Fastconnect 6900 Firmware
Qca6797aq Firmware
Sw5100 Firmware
Wcd9385 Firmware
Sa8770p Firmware
Sm8650q Firmware
Sxr1230p Firmware
Qca6678aq Firmware
Sm8475p Firmware
Sm6225p Firmware
Qam8650p Firmware
Wcn6740 Firmware
Wsa8830 Firmware
Snapdragon 460 Mobile Platform Firmware
Smart Audio 400 Platform Firmware
Qam8775p Firmware
Sa7775p Firmware
Wcn3950 Firmware
Sg8275 Firmware
Snapdragon 662 Mobile Platform Firmware
Wsa8832 Firmware
Qcn9012 Firmware
Qcn9011 Firmware
Wcd9378 Firmware
Sm7635p Firmware
Wsa8810 Firmware
Sa8650p Firmware
Fastconnect 7800 Firmware
Sm4635 Firmware
Qcs5430 Firmware
Sm8735 Firmware
Qcs8550 Firmware
Qamsrv1h Firmware
Wcn7750 Firmware
Sa9000p Firmware
Qcs610 Firmware
Sxr2230p Firmware
Wcn7860 Firmware
Fastconnect 6200 Firmware
Qca6595au Firmware
Video Collaboration Vc1 Platform Firmware
Sm7325p Firmware
Qcm5430 Firmware
Sm7435 Firmware
Snapdragon 888 5g Mobile Platform Firmware
Qcs7230 Firmware
Wcn7861 Firmware
Snapdragon 8 Gen 3 Mobile Platform Firmware
Sm7675 Firmware
Qamsrv1m Firmware
Robotics Rb5 Platform Firmware
Sm6650p Firmware
Wcd9390 Firmware
Sm7550 Firmware
Wsa8835 Firmware
Fastconnect 6700 Firmware
Wcn3910 Firmware
Sg8275p Firmware
Snapdragon 8 Gen 2 Mobile Platform Firmware
Wsa8815 Firmware
Wcd9375 Firmware
Wcd9371 Firmware
Qam8255p Firmware
Qcs8250 Firmware
Sm8750p Firmware
Snapdragon 778g 5g Mobile Platform Firmware
Description
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
Analysis
Memory corruption while processing shared command buffer packet between camera userspace and kernel. [CVSS 6.7 MEDIUM]
Technical Context
Classified as CWE-120 (Classic Buffer Overflow). Affects Csra6620 Firmware. Memory corruption while processing shared command buffer packet between camera userspace and kernel.
Affected Products
Vendor: Qualcomm. Product: Csra6620 Firmware. Versions: up to -.
Remediation
A vendor patch is available — apply it immediately. Enable ASLR, DEP/NX, and stack canaries where possible.
Priority Score
34
Low
Medium
High
Critical
KEV: 0
EPSS: +0.0
CVSS: +34
POC: 0
Share
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).