CVE-2025-47408

EPSS 0.08%
Veröffentlicht 04.05.2026 16:43:14
Zuletzt bearbeitet 07.10.2026 09:10:00
Erkennungen
Login

Untrusted Pointer Dereference in Power Optimization Firmware

Memory corruption when another driver calls an IOCTL with invalid input/output buffer.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 2 Referenzen 4

NVD 19 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Fastconnect 6200 Firmware Version -

Qualcomm ≫ Fastconnect 6200 Version -

Qualcomm ≫ Fastconnect 6900 Firmware Version -

Qualcomm ≫ Fastconnect 6900 Version -

Qualcomm ≫ Fastconnect 7800 Firmware Version -

Qualcomm ≫ Fastconnect 7800 Version -

Qualcomm ≫ Iqx5121 Firmware Version -

Qualcomm ≫ Iqx5121 Version -

Qualcomm ≫ Iqx7181 Firmware Version -

Qualcomm ≫ Iqx7181 Version -

Qualcomm ≫ Qca0000 Firmware Version -

Qualcomm ≫ Qca0000 Version -

Qualcomm ≫ Sc8380xp Firmware Version -

Qualcomm ≫ Sc8380xp Version -

Qualcomm ≫ Sd865 5g Firmware Version -

Qualcomm ≫ Sd865 5g Version -

Qualcomm ≫ Sm6250 Firmware Version -

Qualcomm ≫ Sm6250 Version -

Qualcomm ≫ Snapdragon 7c Compute Firmware Version -

Qualcomm ≫ Snapdragon 7c Compute Version -

Qualcomm ≫ Snapdragon 7c Gen 2 Compute Firmware Version -

Qualcomm ≫ Snapdragon 7c Gen 2 Compute Version -

Qualcomm ≫ Snapdragon Xr2 5g Firmware Version -

Qualcomm ≫ Snapdragon Xr2 5g Version -

Qualcomm ≫ Wcd9380 Firmware Version -

Qualcomm ≫ Wcd9380 Version -

Qualcomm ≫ Wcd9385 Firmware Version -

Qualcomm ≫ Wcd9385 Version -

Qualcomm ≫ Wsa8810 Firmware Version -

Qualcomm ≫ Wsa8810 Version -

Qualcomm ≫ Wsa8815 Firmware Version -

Qualcomm ≫ Wsa8815 Version -

Qualcomm ≫ Wsa8840 Firmware Version -

Qualcomm ≫ Wsa8840 Version -

Qualcomm ≫ Wsa8845 Firmware Version -

Qualcomm ≫ Wsa8845 Version -

Qualcomm ≫ Wsa8845h Firmware Version -

Qualcomm ≫ Wsa8845h Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.08%	0.001

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Qualcomm	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-822 Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-47408

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-47408

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-47408

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-47408