CVE-2025-47393: Improper Validation of Array Index in Automotive Linux OS
Published Jan 6, 2026
·Updated
Memory corruption when accessing resources in kernel driver.
Affected Software
36 affected components
All of the following
Qualcomm Qam8255p Firmware
Qualcomm Qam8255p
All of the following
Qualcomm Qam8650p Firmware
Qualcomm Qam8650p
All of the following
Qualcomm Qam8775p Firmware
Qualcomm Qam8775p
All of the following
Qualcomm Qamsrv1h Firmware
Qualcomm Qamsrv1h
All of the following
Qualcomm Qamsrv1m Firmware
Qualcomm Qamsrv1m
All of the following
Qualcomm Qca6595 Firmware
Qualcomm Qca6595
All of the following
Qualcomm Qca6698aq Firmware
Qualcomm Qca6698aq
All of the following
Qualcomm Qca6797aq Firmware
Qualcomm Qca6797aq
All of the following
Qualcomm Sa7255p Firmware
Qualcomm Sa7255p
All of the following
Qualcomm Sa7775p Firmware
Qualcomm Sa7775p
All of the following
Qualcomm Sa8255p Firmware
Qualcomm Sa8255p
All of the following
Qualcomm Sa8620p Firmware
Qualcomm Sa8620p
All of the following
Qualcomm Sa8650p Firmware
Qualcomm Sa8650p
All of the following
Qualcomm Sa8770p Firmware
Qualcomm Sa8770p
All of the following
Qualcomm Sa8775p Firmware
Qualcomm Sa8775p
All of the following
Qualcomm Sa9000p Firmware
Qualcomm Sa9000p
All of the following
Qualcomm Srv1h Firmware
Qualcomm Srv1h
All of the following
Qualcomm Srv1m Firmware
Qualcomm Srv1m
Event History
Jan 6, 2026
CVE Published
via MITRE·10:48 PM
Data Sourced
via MITRE·10:48 PM
DescriptionSeverityWeakness
Jan 7, 2026
Data Sourced
via NVD·12:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-47393?
CVE-2025-47393 has been assigned a medium severity level due to the potential for memory corruption issues in the kernel driver.
2
How do I fix CVE-2025-47393?
To fix CVE-2025-47393, you should update to the latest firmware version provided by Qualcomm as the vulnerability is addressed in their security patches.
3
What type of vulnerability is CVE-2025-47393?
CVE-2025-47393 is classified as an improper validation of array index vulnerability leading to memory corruption.
4
Which devices are affected by CVE-2025-47393?
CVE-2025-47393 affects various Qualcomm firmware platforms, including Qam8255p, Qam8650p, and others.
5
What are the potential impacts of CVE-2025-47393?
The potential impacts of CVE-2025-47393 include system crashes, unexpected behavior, and security breaches due to memory corruption.