What is the CVSS score of CVE-2025-47394?

CVE-2025-47394 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Sg6150 Firmware are affected by CVE-2025-47394?

CVE-2025-47394 presents notable security risk, a buffer overflow vulnerability rated CVSS 7.8.. A patch is available.

How to fix or mitigate CVE-2025-47394?

Within 7 days: Identify all affected systems and apply vendor patches promptly. If patching is delayed, consider network segmentation to limit exposure.

Sg6150 Firmware CVE-2025-47394

HIGH

Classic Buffer Overflow (CWE-120)

2026-01-07 product-security@qualcomm.com

Memory Corruption Sg6150 Firmware Snapdragon 6 Gen 1 Mobile Platform Firmware Video Collaboration Vc1 Platform Firmware Wcn7881 Firmware Sm8750 Firmware Wsa8832 Firmware Wcn7861 Firmware Wsa8845h Firmware Sxr2330p Firmware Fastconnect 6200 Firmware Fastconnect 7800 Firmware Wcn3988 Firmware Wcn7750 Firmware Wcn3950 Firmware Sm7435 Firmware Wcn6755 Firmware Wsa8835 Firmware Wcn7880 Firmware Fastconnect 6700 Firmware Wsa8845 Firmware Sm8750p Firmware Wsa8840 Firmware Qmp1000 Firmware Fastconnect 6900 Firmware Sxr2350p Firmware Wcn7860 Firmware Sm6475 Firmware Qcs610 Firmware Sw5100p Firmware Wcd9395 Firmware Wcd9370 Firmware Wsa8830 Firmware Wcn3980 Firmware Wcd9378 Firmware Sw5100 Firmware Wcd9380 Firmware Snapdragon 4 Gen 2 Mobile Platform Firmware Wcd9375 Firmware Wsa8815 Firmware Wcd9385 Firmware Wsa8810 Firmware Sm8735 Firmware Sg6150p Firmware Video Collaboration Vc3 Platform Firmware

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

Patch released

Jan 27, 2026 - 19:19 nvd

Patch available

CVE Published

Jan 07, 2026 - 12:17 nvd

HIGH 7.8

DescriptionCVE.org

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.

AnalysisAI

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations. [CVSS 7.8 HIGH]

Technical ContextAI

Classified as CWE-120 (Classic Buffer Overflow). Affects Fastconnect 6200 Firmware. Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.