CVE-2025-47400

nvd nist

Published: Apr 6, 2026Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 1.8 / Impact: 5.2

Source: product-security@qualcomm.com (Secondary)

Description

Cryptographic issue while copying data to a destination buffer without validating its size.

Affected (11)

Products: Qualcomm: Pandeiro Firmware, Snapdragon 8 Elite Gen 5 Firmware, Sw6100 Firmware, Sw6100p Firmware, Themisto Firmware, Wcd9395 Firmware, Wcn7860 Firmware, Wcn7861 Firmware, Wsa8840 Firmware, Wsa8845 Firmware, Wsa8845h Firmware

Qualcomm

11 products

Pandeiro Firmware

Snapdragon 8 Elite Gen 5 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Pandeiro Firmware	All versions

Running on/with	Platform Versions
Qualcomm Pandeiro	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon 8 Elite Gen 5 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon 8 Elite Gen 5	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sw6100 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sw6100	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sw6100p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sw6100p	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Themisto Firmware	All versions

Running on/with	Platform Versions
Qualcomm Themisto	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9395 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9395	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7860 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7860	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7861 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7861	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8840 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8840	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8845 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8845	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8845h Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8845h	All versions

Related CWEs

CWE-126

Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (1)

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html

Source: product-security@qualcomm.com

Vendor Advisory

Timeline

No history available yet.