CVE-2025-39710

Vulnerability

Description CVE-2025-39710 is a high-severity vulnerability in the Linux kernel's Qualcomm Venus media driver. The issue arises when processing packets read from shared memory: the driver reads a packet header that includes a size field but fails to validate that the size does not exceed the number of available words. This oversight can lead to out-of-bounds memory access. [1]

Exploitation

An attacker with local access could potentially exploit this by controlling the firmware's shared memory content, causing the driver to interpret a malformed packet with an excessively large size. No special privileges or user interaction beyond triggering the venus driver operation are required. [1]

Impact

Successful exploitation could allow an attacker to read or write beyond allocated memory buffers, potentially leading to information disclosure, denial of service, or arbitrary code execution in kernel context. The CVSS v3 score of 7.1 reflects the high impact but relatively low attack complexity.

Mitigation

The fix was introduced in mainline Linux kernel and backported to stable branches. The Siemens advisory lists SIMATIC CN 4100 (versions < V5.0) as affected, recommending firmware updates. Users should apply the latest kernel patches from their distribution or vendor. [2][3][4]