CVE-2025-47400

{"id": "CVE-2025-47400", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "product-security@qualcomm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.8}]}, "published": "2026-04-06T16:16:28.590", "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html", "tags": ["Vendor Advisory"], "source": "product-security@qualcomm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "product-security@qualcomm.com", "description": [{"lang": "en", "value": "CWE-126"}]}], "descriptions": [{"lang": "en", "value": "Cryptographic issue while copying data to a destination buffer without validating its size."}], "lastModified": "2026-04-08T21:05:12.693", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23F8EF0C-BB48-47E1-A045-254D79388F75"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "058950FC-ED72-4E91-AE13-87E738ADC083"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41070BDB-15E4-4DD7-A132-A14AA24978E5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_8_elite_gen_5:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "102460A6-9637-4883-9230-2CC888D5D74E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sw6100_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7561D3AA-6719-4D64-9545-C89B070A3E46"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sw6100:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "673D9178-9F53-4A79-9BC2-1529A00AF995"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sw6100p_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8A59464-5093-4F7B-9E38-7021BAD35CF9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sw6100p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8D1950E8-092C-4622-ABDD-311E7762BDE2"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:themisto_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55DE7B27-56A2-4046-9E03-8215587C8827"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:themisto:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0853EA22-4EFD-4037-8B83-CB7C18417D23"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "699056F6-1517-4F25-AE07-4FFCF6923B9F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E4C023D2-6FF5-4FFC-B9F2-895979166580"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EB8794F-7998-424E-AF68-E4A4F9310F65"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "799D69CE-3FCC-4B19-8B00-9AF38111D983"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57608D47-894C-4895-B4B3-4733D55D57DB"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2FFD2C38-1A61-4BED-ABFA-DAE0C4B78620"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA33DE15-C177-43B3-AD50-FF797753D12E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AE1A5841-5BCB-4033-ACB9-23F3FCA65309"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B47BF35-3AA0-4667-842E-19B0FE30BF3C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8A071672-9405-4418-9141-35CEADBB65AF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB7CF473-8B25-4851-91F2-1BD693CCDC85"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "91E591F2-8F72-4A5A-9264-2742EB2DABDA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "product-security@qualcomm.com"}