Buffer Copy Without Checking Size of Input in DSP Service

7.8 / 10

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.

Basic Information

ID CVE-2025-47394

Source qualcomm

Published Jan 6, 2026 at 22:48

Affected Product

Vendor Qualcomm, Inc.

Product Snapdragon

Version FastConnect 6200

Affected Versions Qualcomm, Inc. Snapdragon FastConnect 6200
Qualcomm, Inc. Snapdragon FastConnect 6700
Qualcomm, Inc. Snapdragon FastConnect 6900
Qualcomm, Inc. Snapdragon FastConnect 7800
Qualcomm, Inc. Snapdragon QCS610
Qualcomm, Inc. Snapdragon QMP1000
Qualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC1 Platform
Qualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC3 Platform
Qualcomm, Inc. Snapdragon SG6150
Qualcomm, Inc. Snapdragon SG6150P
Qualcomm, Inc. Snapdragon SM6475
Qualcomm, Inc. Snapdragon SM7435
Qualcomm, Inc. Snapdragon SM8735
Qualcomm, Inc. Snapdragon SM8750
Qualcomm, Inc. Snapdragon SM8750P
Qualcomm, Inc. Snapdragon Snapdragon 4 Gen 2 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon 6 Gen 1 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon W5+ Gen 1 Wearable Platform
Qualcomm, Inc. Snapdragon SW5100
Qualcomm, Inc. Snapdragon SW5100P
Qualcomm, Inc. Snapdragon SXR2330P
Qualcomm, Inc. Snapdragon SXR2350P
Qualcomm, Inc. Snapdragon WCD9370
Qualcomm, Inc. Snapdragon WCD9375
Qualcomm, Inc. Snapdragon WCD9378
Qualcomm, Inc. Snapdragon WCD9380
Qualcomm, Inc. Snapdragon WCD9385
Qualcomm, Inc. Snapdragon WCD9395
Qualcomm, Inc. Snapdragon WCN3950
Qualcomm, Inc. Snapdragon WCN3980
Qualcomm, Inc. Snapdragon WCN3988
Qualcomm, Inc. Snapdragon WCN6755
Qualcomm, Inc. Snapdragon WCN7750
Qualcomm, Inc. Snapdragon WCN7860
Qualcomm, Inc. Snapdragon WCN7861
Qualcomm, Inc. Snapdragon WCN7880
Qualcomm, Inc. Snapdragon WCN7881
Qualcomm, Inc. Snapdragon WSA8810
Qualcomm, Inc. Snapdragon WSA8815
Qualcomm, Inc. Snapdragon WSA8830
Qualcomm, Inc. Snapdragon WSA8832
Qualcomm, Inc. Snapdragon WSA8835
Qualcomm, Inc. Snapdragon WSA8840
Qualcomm, Inc. Snapdragon WSA8845
Qualcomm, Inc. Snapdragon WSA8845H

CWE Classification

CWE-120

References

docs.qualcomm.com /product/publicresources/securitybulletin/january-2026-bulletin.html

{
    "lastseen": "",
    "description": "Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.",
    "published": "2026-01-06T22:48:47.556Z",
    "modified": "2026-01-06T22:48:47.556Z",
    "type": "cve",
    "title": "Buffer Copy Without Checking Size of Input in DSP Service",
    "source": "qualcomm",
    "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2026-bulletin.html",
    "id": "CVE-2025-47394",
    "bulletinFamily": "",
    "cwe": [
        "CWE-120"
    ],
    "cvelist": null,
    "sourceData": "Qualcomm, Inc. Snapdragon FastConnect 6200\nQualcomm, Inc. Snapdragon FastConnect 6700\nQualcomm, Inc. Snapdragon FastConnect 6900\nQualcomm, Inc. Snapdragon FastConnect 7800\nQualcomm, Inc. Snapdragon QCS610\nQualcomm, Inc. Snapdragon QMP1000\nQualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC1 Platform\nQualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC3 Platform\nQualcomm, Inc. Snapdragon SG6150\nQualcomm, Inc. Snapdragon SG6150P\nQualcomm, Inc. Snapdragon SM6475\nQualcomm, Inc. Snapdragon SM7435\nQualcomm, Inc. Snapdragon SM8735\nQualcomm, Inc. Snapdragon SM8750\nQualcomm, Inc. Snapdragon SM8750P\nQualcomm, Inc. Snapdragon Snapdragon 4 Gen 2 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 1 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon W5+ Gen 1 Wearable Platform\nQualcomm, Inc. Snapdragon SW5100\nQualcomm, Inc. Snapdragon SW5100P\nQualcomm, Inc. Snapdragon SXR2330P\nQualcomm, Inc. Snapdragon SXR2350P\nQualcomm, Inc. Snapdragon WCD9370\nQualcomm, Inc. Snapdragon WCD9375\nQualcomm, Inc. Snapdragon WCD9378\nQualcomm, Inc. Snapdragon WCD9380\nQualcomm, Inc. Snapdragon WCD9385\nQualcomm, Inc. Snapdragon WCD9395\nQualcomm, Inc. Snapdragon WCN3950\nQualcomm, Inc. Snapdragon WCN3980\nQualcomm, Inc. Snapdragon WCN3988\nQualcomm, Inc. Snapdragon WCN6755\nQualcomm, Inc. Snapdragon WCN7750\nQualcomm, Inc. Snapdragon WCN7860\nQualcomm, Inc. Snapdragon WCN7861\nQualcomm, Inc. Snapdragon WCN7880\nQualcomm, Inc. Snapdragon WCN7881\nQualcomm, Inc. Snapdragon WSA8810\nQualcomm, Inc. Snapdragon WSA8815\nQualcomm, Inc. Snapdragon WSA8830\nQualcomm, Inc. Snapdragon WSA8832\nQualcomm, Inc. Snapdragon WSA8835\nQualcomm, Inc. Snapdragon WSA8840\nQualcomm, Inc. Snapdragon WSA8845\nQualcomm, Inc. Snapdragon WSA8845H",
    "sourceHref": "",
    "cvss": {
        "score": 7.8,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Snapdragon",
    "version": "FastConnect 6200",
    "vendor": "Qualcomm, Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}

Buffer Copy Without Checking Size of Input in DSP Service_CVE-2025-47394