Buffer Copy Without Checking Size of Input in Core Services
Published Dec 18, 2025
7.8
HIGHCVSS 3.1
EPSS 0.08%
Description
Memory corruption while copying packets received from unix clients.
Affected products
-
- Version AR8031StatusaffectedConstraints-
- Version AR8035StatusaffectedConstraints-
- Version CSRA6620StatusaffectedConstraints-
- Version CSRA6640StatusaffectedConstraints-
- Version FastConnect 6200StatusaffectedConstraints-
- Version FastConnect 6700StatusaffectedConstraints-
- Version FastConnect 6900StatusaffectedConstraints-
- Version FastConnect 7800StatusaffectedConstraints-
- Version QAM8255PStatusaffectedConstraints-
- Version QAM8650PStatusaffectedConstraints-
- Version QAM8775PStatusaffectedConstraints-
- Version QAMSRV1HStatusaffectedConstraints-
- Version QAMSRV1MStatusaffectedConstraints-
- Version QCA2066StatusaffectedConstraints-
- Version QCA6174AStatusaffectedConstraints-
- Version QCA6391StatusaffectedConstraints-
- Version QCA6574StatusaffectedConstraints-
- Version QCA6574AStatusaffectedConstraints-
- Version QCA6574AUStatusaffectedConstraints-
- Version QCA6595AUStatusaffectedConstraints-
- Version QCA6696StatusaffectedConstraints-
- Version QCA8081StatusaffectedConstraints-
- Version QCA8337StatusaffectedConstraints-
- Version QCM5430StatusaffectedConstraints-
- Version QCM6125StatusaffectedConstraints-
- Version QCM6490StatusaffectedConstraints-
- Version QCM8550StatusaffectedConstraints-
- Version QCN6024StatusaffectedConstraints-
- Version QCN9011StatusaffectedConstraints-
- Version QCN9012StatusaffectedConstraints-
- Version QCN9024StatusaffectedConstraints-
- Version QCS5430StatusaffectedConstraints-
- Version QCS6125StatusaffectedConstraints-
- Version QCS6490StatusaffectedConstraints-
- Version QCS8550StatusaffectedConstraints-
- Version QEP8111StatusaffectedConstraints-
- Version QMP1000StatusaffectedConstraints-
- Version Qualcommr Video Collaboration VC1 PlatformStatusaffectedConstraints-
- Version Qualcommr Video Collaboration VC3 PlatformStatusaffectedConstraints-
- Version Robotics RB2 PlatformStatusaffectedConstraints-
- Version SA4150PStatusaffectedConstraints-
- Version SA4155PStatusaffectedConstraints-
- Version SA6155PStatusaffectedConstraints-
- Version SA7255PStatusaffectedConstraints-
- Version SA7775PStatusaffectedConstraints-
- Version SA8155PStatusaffectedConstraints-
- Version SA8195PStatusaffectedConstraints-
- Version SA8255PStatusaffectedConstraints-
- Version SA8620PStatusaffectedConstraints-
- Version SA8650PStatusaffectedConstraints-
- Version SA8770PStatusaffectedConstraints-
- Version SA8775PStatusaffectedConstraints-
- Version SA9000PStatusaffectedConstraints-
- Version SDX61StatusaffectedConstraints-
- Version SM6475StatusaffectedConstraints-
- Version SM6650StatusaffectedConstraints-
- Version SM6650PStatusaffectedConstraints-
- Version SM7250PStatusaffectedConstraints-
- Version SM7435StatusaffectedConstraints-
- Version SM7635StatusaffectedConstraints-
- Version SM7635PStatusaffectedConstraints-
- Version SM8735StatusaffectedConstraints-
- Version SM8750StatusaffectedConstraints-
- Version SM8750PStatusaffectedConstraints-
- Version SRV1HStatusaffectedConstraints-
- Version SRV1MStatusaffectedConstraints-
- Version SSG2115PStatusaffectedConstraints-
- Version SSG2125PStatusaffectedConstraints-
- Version SW5100StatusaffectedConstraints-
- Version SW5100PStatusaffectedConstraints-
- Version SXR1230PStatusaffectedConstraints-
- Version SXR2230PStatusaffectedConstraints-
- Version SXR2250PStatusaffectedConstraints-
- Version Smart Audio 400 PlatformStatusaffectedConstraints-
- Version Snapdragon 4 Gen 2 Mobile PlatformStatusaffectedConstraints-
- Version Snapdragon 6 Gen 1 Mobile PlatformStatusaffectedConstraints-
- Version Snapdragon 680 4G Mobile PlatformStatusaffectedConstraints-
- Version Snapdragon 685 4G Mobile Platform (SM6225-AD)StatusaffectedConstraints-
- Version Snapdragon 765 5G Mobile Platform (SM7250-AA)StatusaffectedConstraints-
- Version Snapdragon 765G 5G Mobile Platform (SM7250-AB)StatusaffectedConstraints-
- Version Snapdragon 768G 5G Mobile Platform (SM7250-AC)StatusaffectedConstraints-
- Version Snapdragon AR1 Gen 1 PlatformStatusaffectedConstraints-
- Version Snapdragon AR1 Gen 1 Platform "Luna1"StatusaffectedConstraints-
- Version Snapdragon AR2 Gen 1 PlatformStatusaffectedConstraints-
- Version Snapdragon W5+ Gen 1 Wearable PlatformStatusaffectedConstraints-
- Version Snapdragon X32 5G Modem-RF SystemStatusaffectedConstraints-
- Version Snapdragon X35 5G Modem-RF SystemStatusaffectedConstraints-
- Version Snapdragon X65 5G Modem-RF SystemStatusaffectedConstraints-
- Version WCD9335StatusaffectedConstraints-
- Version WCD9340StatusaffectedConstraints-
- Version WCD9370StatusaffectedConstraints-
- Version WCD9375StatusaffectedConstraints-
- Version WCD9378StatusaffectedConstraints-
- Version WCD9380StatusaffectedConstraints-
- Version WCD9385StatusaffectedConstraints-
- Version WCD9395StatusaffectedConstraints-
- Version WCN3950StatusaffectedConstraints-
- Version WCN3980StatusaffectedConstraints-
- Version WCN3988StatusaffectedConstraints-
- Version WCN6650StatusaffectedConstraints-
- Version WCN6740StatusaffectedConstraints-
- Version WCN6755StatusaffectedConstraints-
- Version WCN7750StatusaffectedConstraints-
- Version WCN7860StatusaffectedConstraints-
- Version WCN7861StatusaffectedConstraints-
- Version WCN7880StatusaffectedConstraints-
- Version WCN7881StatusaffectedConstraints-
- Version WSA8810StatusaffectedConstraints-
- Version WSA8815StatusaffectedConstraints-
- Version WSA8830StatusaffectedConstraints-
- Version WSA8832StatusaffectedConstraints-
- Version WSA8835StatusaffectedConstraints-
- Version WSA8840StatusaffectedConstraints-
- Version WSA8845StatusaffectedConstraints-
- Version WSA8845HStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | unaffected |
|
Configuration 1
- n/a
Configuration 2
- n/a
Configuration 3
- n/a
Configuration 4
- n/a
Configuration 5
- n/a
Running on/with
- n/a
Configuration 6
- n/a
Running on/with
- n/a
Configuration 7
- n/a
Running on/with
- n/a
Configuration 8
- n/a
Running on/with
- n/a
Configuration 9
- n/a
Configuration 10
- n/a
Configuration 11
- n/a
Configuration 12
- n/a
Configuration 13
- n/a
Configuration 14
- n/a
Configuration 15
- n/a
Configuration 16
- n/a
Configuration 17
- n/a
Configuration 18
- n/a
Configuration 19
- n/a
Configuration 20
- n/a
Configuration 21
- n/a
Configuration 22
- n/a
Configuration 23
- n/a
Configuration 24
- n/a
Configuration 25
- n/a
Configuration 26
- n/a
Configuration 27
- n/a
Configuration 28
- n/a
Configuration 29
- n/a
Configuration 30
- n/a
Configuration 31
- n/a
Configuration 32
- n/a
Configuration 33
- n/a
Configuration 34
- n/a
Configuration 35
- n/a
Configuration 36
- n/a
Configuration 37
- n/a
Configuration 38
Running on/with
- n/a
Configuration 39
Running on/with
- n/a
Configuration 40
- n/a
Running on/with
- n/a
Configuration 41
- n/a
Configuration 42
- n/a
Configuration 43
- n/a
Configuration 44
- n/a
Configuration 45
- n/a
Configuration 46
- n/a
Configuration 47
- n/a
Configuration 48
- n/a
Configuration 49
- n/a
Configuration 50
- n/a
Configuration 51
- n/a
Configuration 52
- n/a
Configuration 53
- n/a
Configuration 54
- n/a
Configuration 55
- n/a
Configuration 56
- n/a
Configuration 57
- n/a
Configuration 58
- n/a
Configuration 59
- n/a
Configuration 60
- n/a
Configuration 61
- n/a
Configuration 62
- n/a
Configuration 63
- n/a
Configuration 64
- n/a
Configuration 65
Running on/with
- n/a
Configuration 66
Running on/with
- n/a
Configuration 67
Running on/with
- n/a
Configuration 68
Running on/with
- n/a
Configuration 69
Running on/with
- n/a
Configuration 70
Running on/with
- n/a
Configuration 71
Running on/with
- n/a
Configuration 72
Running on/with
- n/a
Configuration 73
Running on/with
- n/a
Configuration 74
Running on/with
- n/a
Configuration 75
Running on/with
- n/a
Configuration 76
Running on/with
- n/a
Configuration 77
Running on/with
- n/a
Configuration 78
Running on/with
- n/a
Configuration 79
Running on/with
- n/a
Configuration 80
- n/a
Configuration 81
- n/a
Configuration 82
- n/a
Configuration 83
- n/a
Configuration 84
- n/a
Configuration 85
- n/a
Configuration 86
- n/a
Configuration 87
- n/a
Configuration 88
- n/a
Configuration 89
- n/a
Configuration 90
- n/a
Configuration 91
- n/a
Configuration 92
- n/a
Configuration 93
- n/a
Configuration 94
- n/a
Configuration 95
- n/a
Configuration 96
- n/a
Configuration 97
- n/a
Configuration 98
- n/a
Configuration 99
- n/a
Configuration 100
- n/a
Configuration 101
- n/a
Configuration 102
- n/a
Configuration 103
- n/a
Configuration 104
- n/a
Configuration 105
- n/a
Configuration 106
- n/a
Configuration 107
- n/a
Configuration 108
- n/a
Configuration 109
- n/a
Configuration 110
- n/a
Configuration 111
- n/a
Configuration 112
- n/a
Configuration 113
- n/a
Configuration 114
- n/a
Configuration 115
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
NoTechnical Impact
TotalDecision
n/aAssessed Dec 18, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.
Score over time
2025–2026- EPSS v4
- EPSS v5
Percentile over time
- EPSS v4
- EPSS v5
Table of values (3 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 3, 2026 | 0.08% (0.00081) | 0.16th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.07% (0.00070) | 0.05th | v5 (v2026.06.15) |
| Dec 18, 2025 | 0.01% (0.00015) | 2.44th | v4 (v2025.03.14) |
References (1)
- https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html | Vendor Advisory |
Change history (0)
No recorded changes yet.