CVE-2025-47391
HIGH EPSS 0.9%
Published Apr 6, 20262mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
Published Apr 6, 2026 2mo ago
Last Modified Jun 17, 2026 1w ago
Description
Memory corruption while processing a frame request from user.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
0.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-121
Affected Products 202
| Vendor | Product | Version | Range |
|---|---|---|---|
| qualcomm | wcn3988_firmware | * | any |
| qualcomm | wcn3988 | * | any |
| qualcomm | wcn6450_firmware | * | any |
| qualcomm | wcn6450 | * | any |
| qualcomm | wcn6650_firmware | * | any |
| qualcomm | wcn6650 | * | any |
| qualcomm | wcn6755_firmware | * | any |
| qualcomm | wcn6755 | * | any |
| qualcomm | wcn7860_firmware | * | any |
| qualcomm | wcn7860 | * | any |
| qualcomm | wcn7861_firmware | * | any |
| qualcomm | wcn7861 | * | any |
| qualcomm | wcn7880_firmware | * | any |
| qualcomm | wcn7880 | * | any |
| qualcomm | wcn7881_firmware | * | any |
| qualcomm | wcn7881 | * | any |
| qualcomm | wsa8810_firmware | * | any |
| qualcomm | wsa8810 | * | any |
| qualcomm | wsa8815_firmware | * | any |
| qualcomm | wsa8815 | * | any |
| qualcomm | wsa8830_firmware | * | any |
| qualcomm | wsa8830 | * | any |
| qualcomm | wsa8832_firmware | * | any |
| qualcomm | wsa8832 | * | any |
| qualcomm | wsa8835_firmware | * | any |
| qualcomm | wsa8835 | * | any |
| qualcomm | wsa8840_firmware | * | any |
| qualcomm | wsa8840 | * | any |
| qualcomm | wsa8845_firmware | * | any |
| qualcomm | wsa8845 | * | any |
| qualcomm | wsa8845h_firmware | * | any |
| qualcomm | wsa8845h | * | any |
| qualcomm | fastconnect_6200_firmware | * | any |
| qualcomm | fastconnect_6200 | * | any |
| qualcomm | fastconnect_6700_firmware | * | any |
| qualcomm | fastconnect_6700 | * | any |
| qualcomm | fastconnect_6900_firmware | * | any |
| qualcomm | fastconnect_6900 | * | any |
| qualcomm | fastconnect_7800_firmware | * | any |
| qualcomm | fastconnect_7800 | * | any |
| qualcomm | g2_gen_1_firmware | * | any |
| qualcomm | g2_gen_1 | * | any |
| qualcomm | iq-615_firmware | * | any |
| qualcomm | iq-615 | * | any |
| qualcomm | iq-8275_firmware | * | any |
| qualcomm | iq-8275 | * | any |
| qualcomm | iq-8300_firmware | * | any |
| qualcomm | iq-8300 | * | any |
| qualcomm | iq-9100_firmware | * | any |
| qualcomm | iq-9100 | * | any |
| qualcomm | iq-9075_firmware | * | any |
| qualcomm | iq-9075 | * | any |
| qualcomm | lemans_au_lgit_firmware | * | any |
| qualcomm | lemans_au_lgit | * | any |
| qualcomm | lemansau_firmware | * | any |
| qualcomm | lemansau | * | any |
| qualcomm | milos_firmware | * | any |
| qualcomm | milos | * | any |
| qualcomm | monaco_iot_firmware | * | any |
| qualcomm | monaco_iot | * | any |
| qualcomm | netrani_firmware | * | any |
| qualcomm | netrani | * | any |
| qualcomm | orne_firmware | * | any |
| qualcomm | orne | * | any |
| qualcomm | palawan25_firmware | * | any |
| qualcomm | palawan25 | * | any |
| qualcomm | pandeiro_firmware | * | any |
| qualcomm | pandeiro | * | any |
| qualcomm | qam8255p_firmware | * | any |
| qualcomm | qam8255p | * | any |
| qualcomm | qam8397p_firmware | * | any |
| qualcomm | qam8397p | * | any |
| qualcomm | qamsrv1h_firmware | * | any |
| qualcomm | qamsrv1h | * | any |
| qualcomm | qamsrv1m_firmware | * | any |
| qualcomm | qamsrv1m | * | any |
| qualcomm | qca6391_firmware | * | any |
| qualcomm | qca6391 | * | any |
| qualcomm | qca6595_firmware | * | any |
| qualcomm | qca6595 | * | any |
| qualcomm | qca6595au_firmware | * | any |
| qualcomm | qca6595au | * | any |
| qualcomm | qca6678aq_firmware | * | any |
| qualcomm | qca6678aq | * | any |
| qualcomm | qca6698aq_firmware | * | any |
| qualcomm | qca6698aq | * | any |
| qualcomm | qca6698au_firmware | * | any |
| qualcomm | qca6698au | * | any |
| qualcomm | qca6797aq_firmware | * | any |
| qualcomm | qca6797aq | * | any |
| qualcomm | qca8695au_firmware | * | any |
| qualcomm | qca8695au | * | any |
| qualcomm | qcm4490_firmware | * | any |
| qualcomm | qcm4490 | * | any |
| qualcomm | qcm5430_firmware | * | any |
| qualcomm | qcm5430 | * | any |
| qualcomm | qcm6490_firmware | * | any |
| qualcomm | qcm6490 | * | any |
| qualcomm | qcn9011_firmware | * | any |
| qualcomm | qcn9011 | * | any |
| qualcomm | qcn9012_firmware | * | any |
| qualcomm | qcn9012 | * | any |
| qualcomm | qcs4490_firmware | * | any |
| qualcomm | qcs4490 | * | any |
| qualcomm | qcs8550_firmware | * | any |
| qualcomm | qcs8550 | * | any |
| qualcomm | qmp1000_firmware | * | any |
| qualcomm | qmp1000 | * | any |
| qualcomm | video_collaboration_vc3_platform_firmware | * | any |
| qualcomm | video_collaboration_vc3_platform | * | any |
| qualcomm | sa7255p_firmware | * | any |
| qualcomm | sa7255p | * | any |
| qualcomm | sa7775p_firmware | * | any |
| qualcomm | sa7775p | * | any |
| qualcomm | sa8255p_firmware | * | any |
| qualcomm | sa8255p | * | any |
| qualcomm | sa8620p_firmware | * | any |
| qualcomm | sa8620p | * | any |
| qualcomm | sa8770p_firmware | * | any |
| qualcomm | sa8770p | * | any |
| qualcomm | sa9000p_firmware | * | any |
| qualcomm | sa9000p | * | any |
| qualcomm | sd_8_gen1_5g_firmware | * | any |
| qualcomm | sd_8_gen1_5g | * | any |
| qualcomm | sm6650p_firmware | * | any |
| qualcomm | sm6650p | * | any |
| qualcomm | sm7435_firmware | * | any |
| qualcomm | sm7435 | * | any |
| qualcomm | sm7550_firmware | * | any |
| qualcomm | sm7550 | * | any |
| qualcomm | sm7550p_firmware | * | any |
| qualcomm | sm7550p | * | any |
| qualcomm | sm7635p_firmware | * | any |
| qualcomm | sm7635p | * | any |
| qualcomm | sm7675_firmware | * | any |
| qualcomm | sm7675 | * | any |
| qualcomm | sm7675p_firmware | * | any |
| qualcomm | sm7675p | * | any |
| qualcomm | sm8475p_firmware | * | any |
| qualcomm | sm8475p | * | any |
| qualcomm | sm8550p_firmware | * | any |
| qualcomm | sm8550p | * | any |
| qualcomm | sm8635_firmware | * | any |
| qualcomm | sm8635 | * | any |
| qualcomm | sm8635p_firmware | * | any |
| qualcomm | sm8635p | * | any |
| qualcomm | sm8650q_firmware | * | any |
| qualcomm | sm8650q | * | any |
| qualcomm | sm8750p_firmware | * | any |
| qualcomm | sm8750p | * | any |
| qualcomm | snapdragon_4_gen_2_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_4_gen_2_mobile_platform | * | any |
| qualcomm | snapdragon_6_gen_1_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_6_gen_1_mobile_platform | * | any |
| qualcomm | snapdragon_6_gen_3_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_6_gen_3_mobile_platform | * | any |
| qualcomm | snapdragon_6_gen_4_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_6_gen_4_mobile_platform | * | any |
| qualcomm | snapdragon_7_gen_1_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_7_gen_1_mobile_platform | * | any |
| qualcomm | snapdragon_7\+_gen_2_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_7\+_gen_2_mobile_platform | * | any |
| qualcomm | snapdragon_7s_gen_3_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_7s_gen_3_mobile_platform | * | any |
| qualcomm | snapdragon_8_elite_firmware | * | any |
| qualcomm | snapdragon_8_elite | * | any |
| qualcomm | snapdragon_8_elite_gen_5_firmware | * | any |
| qualcomm | snapdragon_8_elite_gen_5 | * | any |
| qualcomm | snapdragon_8_gen_1_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_8_gen_1_mobile_platform | * | any |
| qualcomm | snapdragon_8_gen_2_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_8_gen_2_mobile_platform | * | any |
| qualcomm | snapdragon_8_gen_3_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_8_gen_3_mobile_platform | * | any |
| qualcomm | snapdragon_8\+_gen_1_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_8\+_gen_1_mobile_platform | * | any |
| qualcomm | snapdragon_8\+_gen_2_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_8\+_gen_2_mobile_platform | * | any |
| qualcomm | snapdragon_ar1_gen_1_platform_firmware | * | any |
| qualcomm | snapdragon_ar1_gen_1_platform | * | any |
| qualcomm | srv1h_firmware | * | any |
| qualcomm | srv1h | * | any |
| qualcomm | srv1m_firmware | * | any |
| qualcomm | srv1m | * | any |
| qualcomm | wcd9370_firmware | * | any |
| qualcomm | wcd9370 | * | any |
| qualcomm | wcd9371_firmware | * | any |
| qualcomm | wcd9371 | * | any |
| qualcomm | wcd9375_firmware | * | any |
| qualcomm | wcd9375 | * | any |
| qualcomm | wcd9378_firmware | * | any |
| qualcomm | wcd9378 | * | any |
| qualcomm | wcd9380_firmware | * | any |
| qualcomm | wcd9380 | * | any |
| qualcomm | wcd9385_firmware | * | any |
| qualcomm | wcd9385 | * | any |
| qualcomm | wcd9390_firmware | * | any |
| qualcomm | wcd9390 | * | any |
| qualcomm | wcd9395_firmware | * | any |
| qualcomm | wcd9395 | * | any |
| qualcomm | wcn3950_firmware | * | any |
| qualcomm | wcn3950 | * | any |
References 1
- docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html
Remediation
- docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html