CVE-2025-47xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
807 records · Page 6 of 9
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
UpdatedMemory corruption occurs when a secure application is launched on a device with insufficient memory.
UpdatedTransient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.
UpdatedMemory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
UpdatedMemory corruption when accessing resources in kernel driver.
UpdatedMemory corruption when decoding corrupted satellite data files with invalid signature offsets.
UpdatedMemory corruption while processing a frame request from user.
UpdatedMemory corruption while preprocessing IOCTL request in JPEG driver.
UpdatedMemory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
UpdatedMemory corruption while passing pages to DSP with an unaligned starting address.
UpdatedMemory Corruption when processing IOCTLs for JPEG data without verification.
UpdatedMemory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
UpdatedMemory Corruption when accessing trusted execution environment without proper privilege check.
Updated- CVE-2025-47384: Reachable Assertion in FW 6.5 Medium
Transient DOS when MAC configures config id greater than supported maximum value.
Updated Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
UpdatedMemory corruption while loading an invalid firmware in boot loader.
UpdatedMemory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.
UpdatedMemory corruption while preprocessing IOCTLs in sensors.
UpdatedMemory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
Updated- CVE-2025-47378: Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS 7.1 High
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.
Updated Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
UpdatedMemory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
UpdatedMemory corruption while handling different IOCTL calls from the user-space simultaneously.
UpdatedMemory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.
UpdatedMemory Corruption when accessing buffers with invalid length during TA invocation.
UpdatedMemory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.
Updated- CVE-2025-47371: Reachable Assertion in Modem 6.5 Medium
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
Updated Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
UpdatedInformation disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
UpdatedMemory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.
UpdatedMemory corruption while accessing a buffer during IOCTL processing.
UpdatedCryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
UpdatedMemory corruption while processing large input data from a remote source via a communication interface.
UpdatedMemory corruption while calculating offset from partition start point.
UpdatedMemory corruption when calculating oversized partition sizes without proper checks.
UpdatedInformation disclosure while processing message from client with invalid payload.
Updated- CVE-2025-47361: Improper Validation of Array Index in Automotive Software platform based on QNX 7.8 High
Memory corruption when triggering a subsystem crash with an out-of-range identifier.
Updated Memory corruption while processing client message during device management.
UpdatedMemory Corruption when multiple threads simultaneously access a memory free API.
UpdatedMemory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.
UpdatedInformation Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
Updated- CVE-2025-47356: Double Free in Video 7.8 High
Memory Corruption when multiple threads concurrently access and modify shared resources.
Updated Memory corruption while invoking remote procedure IOCTL calls.
UpdatedMemory corruption while allocating buffers in DSP service.
Updated- CVE-2025-47353: Exposed Dangerous Method or Function in Automotive Software platform based on QNX 7.8 High
Memory corruption while processing request sent from GVM.
Updated Memory corruption while processing audio streaming operations.
UpdatedMemory corruption while processing user buffers.
UpdatedMemory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.
UpdatedMemory corruption while processing an escape call.
UpdatedMemory corruption while processing identity credential operations in the trusted application.
UpdatedMemory corruption while processing control commands in the virtual memory management interface.
UpdatedMemory corruption while processing a secure logging command in the trusted application.
UpdatedCryptographic issue may occur while encrypting license data.
UpdatedMemory corruption while handling sensor utility operations.
UpdatedMemory corruption while processing a video session to set video parameters.
UpdatedTransient DOS may occur when multi-profile concurrency arises with QHS enabled.
Updatedmemory corruption while processing an image encoding completion event.
UpdatedMemory corruption while processing IOCTL call to get the mapping.
UpdatedMemory corruption while deinitializing a HDCP session.
UpdatedMemory corruption while processing escape commands from userspace.
UpdatedMemory corruption while accessing a synchronization object during concurrent operations.
UpdatedMemory corruption while performing sensor register read operations.
UpdatedMemory corruption while parsing clock configuration data for a specific hardware type.
UpdatedMemory corruption while processing shared command buffer packet between camera userspace and kernel.
Updated- CVE-2025-47333: Use After Free in HLOS 6.6 Medium
Memory corruption while handling buffer mapping operations in the cryptographic driver.
Updated Memory corruption while processing a config call from userspace.
Updated- CVE-2025-47331: Buffer Over-read in Video 6.1 Medium
Information disclosure while processing a firmware event.
Updated - CVE-2025-47330: Buffer Over-read in Video 5.5 Medium
Transient DOS while parsing video packets received from the video firmware.
Updated Memory corruption while handling invalid inputs in application info setup.
UpdatedTransient DOS while processing power control requests with invalid antenna or stream values.
UpdatedMemory corruption while encoding the image data.
UpdatedTransient DOS while handling command data during power control processing.
UpdatedInformation disclosure while processing system calls with invalid parameters.
UpdatedInformation disclosure while accessing and modifying the PIB file of a remote device via powerline.
UpdatedMemory corruption while routing GPR packets between user and root when handling large data packet.
UpdatedMemory corruption while handling IOCTL calls to set mode.
UpdatedMemory corruption while copying packets received from unix clients.
UpdatedMemory corruption while processing MFC channel configuration during music playback.
Updated- CVE-2025-47319: Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS 6.7 Medium
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
Updated Transient DOS while parsing the EPTM test control message to get the test pattern.
UpdatedMemory corruption due to global buffer overflow when a test command uses an invalid payload type.
Updated- CVE-2025-47316: Double Free in Video 7.8 High
Memory corruption due to double free when multiple threads race to set the timestamp store.
Updated Memory corruption while handling repeated memory unmap requests from guest VM.
UpdatedMemory corruption while processing data sent by FE driver.
Updated- CVE-2025-47303: Not used Rejected
Not used
Updated · Rejected record - CVE-2025-47302: Not used Rejected
Not used
Updated · Rejected record - CVE-2025-47301: Not used Rejected
Not used
Updated · Rejected record - CVE-2025-47300: Not used Rejected
Not used
Updated · Rejected record - CVE-2025-47299: Not used Rejected
Not used
Updated · Rejected record - CVE-2025-47298: Not used Rejected
Not used
Updated · Rejected record - CVE-2025-47297: Not used Rejected
Not used
Updated · Rejected record - CVE-2025-47296: Not used Rejected
Not used
Updated · Rejected record A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's control.
UpdatedA integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the csfd daemon via a specially crafted request.
UpdatedPowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to version 6.7.2, in certain places, powsybl-core XML parsing is vulnerable to an XML external entity (XXE) attack and to a server-side request forgery (SSRF) attack. This allows an attacker to elevate their privileges to read files that they do not have permissions to, including sensitive files on the syst
Updated- CVE-2025-47292: Cap Collectif vulnerable to insecure deserialization leading to remote code execution 9.5 Critical
Cap Collectif is an online decision making platform that integrates several tools. Before commit 812f2a7d271b76deab1175bdaf2be0b8102dd198, the `DebateAlternateArgumentsResolver` deserializes a `Cursor`, allowing any classes and which can be controlled by unauthenticated user. Exploitation of this vulnerability can lead to Remote Code Execution. The vulnerability is fixed in commit 812f2a7d271b76de
Updated containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd, starting in version 2.0.1 and prior to version 2.0.5, doesn't put usernamespaced containers under the Kubernetes' cgroup hierarchy, therefore some Kubernetes limits are not honored. This may cause a denial of service of the Kubernetes node. This bug has been fixed in containerd
Updatedcontainerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0. While unpacking an image during an image pull, specially crafted container images could arbitrarily modify the host file system. The only affected version of containerd is 2.1.0. Other versions of containerd are not affected. This bug has been fixed in containerd 2.1.1. Users s
UpdatedCE Phoenix is a free, open-source eCommerce platform. A stored cross-site scripting (XSS) vulnerability was discovered in CE Phoenix versions 1.0.9.9 through 1.1.0.2 where an attacker can inject malicious JavaScript into the testimonial description field. Once submitted, if the shop owner (admin) approves the testimonial, the script executes in the context of any user visiting the testimonial page
UpdatedDiscourse Policy plugin gives the ability to confirm users have seen or done something. Prior to version 0.1.1, if there was a policy posted to a public topic that was tied to a private group then the group members could be shown to non-group members. This issue has been patched in version 0.1.1. A workaround involves moving any policy topics with private groups to restricted categories.
Updated