Skip to content
OpenAdvisories
High · 7.8 CVE-2025-47389 EUVD-2025-209224GHSA-34mx-45mg-p6wm

Buffer Copy Without Checking Size of Input in Automotive Platform

Published Apr 6, 2026 · Updated Apr 7, 2026 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AR8035, Cologne, CSRA6620, CSRA6640, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, FWA Gen 3 Ultra Platform, G2 Gen 1, IQ6 Series Platform, IQ8 Series Platform, IQ9 Series Platform, LeMans_AU_LGIT, LeMansAU, Milos, Monaco_IOT, Netrani, Orne, Palawan25, Pa… —

References