CVE-2025-47400

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-47400", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2025-05-06T08:33:16.276Z", "datePublished": "2026-04-06T15:33:44.933Z", "dateUpdated": "2026-04-07T03:55:46.892Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Compute", "Snapdragon Wearables"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "Pandeiro"}, {"status": "affected", "version": "Snapdragon 8 Elite Gen 5"}, {"status": "affected", "version": "SW6100"}, {"status": "affected", "version": "SW6100P"}, {"status": "affected", "version": "Themisto"}, {"status": "affected", "version": "WCD9395"}, {"status": "affected", "version": "WCN7860"}, {"status": "affected", "version": "WCN7861"}, {"status": "affected", "version": "WSA8840"}, {"status": "affected", "version": "WSA8845"}, {"status": "affected", "version": "WSA8845H"}]}], "descriptions": [{"lang": "en", "value": "Cryptographic issue while copying data to a destination buffer without validating its size."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-126", "description": "CWE-126 Buffer Over-read", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2026-04-06T15:33:44.933Z"}, "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"}], "title": "Buffer Over-read in Computer Vision"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-06T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2025-47400"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-07T03:55:46.892Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-47400", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-06T16:11:51.398488Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-06T16:21:43.446Z"}}], "cna": {"title": "Buffer Over-read in Computer Vision", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Qualcomm, Inc.", "product": "Snapdragon", "versions": [{"status": "affected", "version": "Pandeiro"}, {"status": "affected", "version": "Snapdragon 8 Elite Gen 5"}, {"status": "affected", "version": "SW6100"}, {"status": "affected", "version": "SW6100P"}, {"status": "affected", "version": "Themisto"}, {"status": "affected", "version": "WCD9395"}, {"status": "affected", "version": "WCN7860"}, {"status": "affected", "version": "WCN7861"}, {"status": "affected", "version": "WSA8840"}, {"status": "affected", "version": "WSA8845"}, {"status": "affected", "version": "WSA8845H"}], "platforms": ["Snapdragon Compute", "Snapdragon Wearables"], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"}], "descriptions": [{"lang": "en", "value": "Cryptographic issue while copying data to a destination buffer without validating its size."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-126", "description": "CWE-126 Buffer Over-read"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2026-04-06T15:33:44.933Z"}}}, "cveMetadata": {"cveId": "CVE-2025-47400", "state": "PUBLISHED", "dateUpdated": "2026-04-07T03:55:46.892Z", "dateReserved": "2025-05-06T08:33:16.276Z", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "datePublished": "2026-04-06T15:33:44.933Z", "assignerShortName": "qualcomm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Compute", "Snapdragon Wearables"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "Pandeiro"}, {"status": "affected", "version": "Snapdragon 8 Elite Gen 5"}, {"status": "affected", "version": "SW6100"}, {"status": "affected", "version": "SW6100P"}, {"status": "affected", "version": "Themisto"}, {"status": "affected", "version": "WCD9395"}, {"status": "affected", "version": "WCN7860"}, {"status": "affected", "version": "WCN7861"}, {"status": "affected", "version": "WSA8840"}, {"status": "affected", "version": "WSA8845"}, {"status": "affected", "version": "WSA8845H"}]}], "source": "product-security@qualcomm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "23F8EF0C-BB48-47E1-A045-254D79388F75", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:*", "matchCriteriaId": "058950FC-ED72-4E91-AE13-87E738ADC083", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "41070BDB-15E4-4DD7-A132-A14AA24978E5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:snapdragon_8_elite_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "102460A6-9637-4883-9230-2CC888D5D74E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sw6100_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7561D3AA-6719-4D64-9545-C89B070A3E46", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sw6100:-:*:*:*:*:*:*:*", "matchCriteriaId": "673D9178-9F53-4A79-9BC2-1529A00AF995", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sw6100p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "D8A59464-5093-4F7B-9E38-7021BAD35CF9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sw6100p:-:*:*:*:*:*:*:*", "matchCriteriaId": "8D1950E8-092C-4622-ABDD-311E7762BDE2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:themisto_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "55DE7B27-56A2-4046-9E03-8215587C8827", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:themisto:-:*:*:*:*:*:*:*", "matchCriteriaId": "0853EA22-4EFD-4037-8B83-CB7C18417D23", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "699056F6-1517-4F25-AE07-4FFCF6923B9F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4C023D2-6FF5-4FFC-B9F2-895979166580", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2EB8794F-7998-424E-AF68-E4A4F9310F65", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*", "matchCriteriaId": "799D69CE-3FCC-4B19-8B00-9AF38111D983", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "57608D47-894C-4895-B4B3-4733D55D57DB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FFD2C38-1A61-4BED-ABFA-DAE0C4B78620", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA33DE15-C177-43B3-AD50-FF797753D12E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE1A5841-5BCB-4033-ACB9-23F3FCA65309", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5B47BF35-3AA0-4667-842E-19B0FE30BF3C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A071672-9405-4418-9141-35CEADBB65AF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB7CF473-8B25-4851-91F2-1BD693CCDC85", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*", "matchCriteriaId": "91E591F2-8F72-4A5A-9264-2742EB2DABDA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cryptographic issue while copying data to a destination buffer without validating its size."}, {"lang": "es", "value": "Problema criptogr\u00e1fico al copiar datos a un b\u00fafer de destino sin validar su tama\u00f1o."}], "id": "CVE-2025-47400", "lastModified": "2026-10-07T09:10:00.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.2, "source": "product-security@qualcomm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-47400", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-06T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-04-06T16:16:28.590", "references": [{"source": "product-security@qualcomm.com", "tags": ["Vendor Advisory"], "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"}], "sourceIdentifier": "product-security@qualcomm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-126"}], "source": "product-security@qualcomm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["snapdragon_compute", "snapdragon_wearables"], "status": "affected", "versions": {"scheme": "generic", "value": "Pandeiro"}}, {"platform": ["snapdragon_compute", "snapdragon_wearables"], "status": "affected", "versions": {"scheme": "generic", "value": "Snapdragon 8 Elite Gen 5"}}, {"platform": ["snapdragon_compute", "snapdragon_wearables"], "status": "affected", "versions": {"scheme": "generic", "value": "SW6100"}}, {"platform": ["snapdragon_compute", "snapdragon_wearables"], "status": "affected", "versions": {"scheme": "generic", "value": "SW6100P"}}, {"platform": ["snapdragon_compute", "snapdragon_wearables"], "status": "affected", "versions": {"scheme": "generic", "value": "Themisto"}}, {"platform": ["snapdragon_compute", "snapdragon_wearables"], "status": "affected", "versions": {"scheme": "generic", "value": "WCD9395"}}, {"platform": ["snapdragon_compute", "snapdragon_wearables"], "status": "affected", "versions": {"scheme": "generic", "value": "WCN7860"}}, {"platform": ["snapdragon_compute", "snapdragon_wearables"], "status": "affected", "versions": {"scheme": "generic", "value": "WCN7861"}}, {"platform": ["snapdragon_compute", "snapdragon_wearables"], "status": "affected", "versions": {"scheme": "generic", "value": "WSA8840"}}, {"platform": ["snapdragon_compute", "snapdragon_wearables"], "status": "affected", "versions": {"scheme": "generic", "value": "WSA8845"}}, {"platform": ["snapdragon_compute", "snapdragon_wearables"], "status": "affected", "versions": {"scheme": "generic", "value": "WSA8845H"}}], "enrichment": {"confidence": 86.0, "confidence_source": "matching", "scores": [{"score": 86.0, "source": "matching"}]}, "original": {"product": "Snapdragon", "source": "cna", "vendor": "Qualcomm, Inc."}, "product": "snapdragon", "vendor": "qualcomm"}], "analysis": {"en": {"generated_at": "2026-04-08T23:37:35.435732+00:00", "value": {"mitigation_remediation": ["Apply the latest Qualcomm firmware or software updates as documented in the April\u00a02026 security bulletin.", "Verify that your device firmware matches the fixed version mentioned in the bulletin.", "If an update is unavailable for your device, disable or limit the computer\u2011vision or cryptographic features that trigger the vulnerability.", "Monitor system logs for anomalous memory access or read errors that could indicate exploitation attempts."], "summary": {"action": "Patch Now", "impact": "Information Disclosure"}, "threat_synthesis": {"affected_systems": "The vulnerability affects Qualcomm\u2019s Snapdragon line, including devices such as the Snapdragon\u00a08\u00a0Elite\u00a0Gen\u00a05, Pandeiro, SW6100, SW6100P, Themisto, WCD9395, WCN7860, WCN7861, WSA8840, WSA8845, and WSA8845H, as well as the corresponding firmware editions. These components are listed in the Qualcomm security bulletin and may be susceptible if they have not been updated to the fixed revision. Exact affected firmware releases are not included in the available data, so any hardware running the affected firmware stack is potentially impacted.", "description_and_impact": "The flaw is a buffer over\u2011read that occurs when Qualcomm\u2019s computer vision component copies cryptographic data to a destination buffer without first checking the buffer size. This omission can allow an attacker to read beyond the intended memory region, potentially exposing secret data such as cryptographic keys or other sensitive information. The weakness is commonly known as buffer over-read (CWE\u2011126).", "risk_and_exploitability": "The CVSS base score of 7.1 indicates a high severity risk, while an EPSS score of less than 1% suggests that exploitation is unlikely to be widespread in the near future. The vulnerability is not listed in CISA\u2019s KEV catalog, implying no known large\u2011scale exploitation. Likely attackers would require local or privileged access to the device, as the over\u2011read occurs within an internal cryptographic routine rather than through a network interface. Consequently, organizations can assess the risk based on their exposure model, but keeping firmware current is advised."}}}}, "created": "2026-04-06T20:14:00.746937+00:00", "updated": "2026-04-09T08:28:57.904694+00:00", "vendors": ["qualcomm", "qualcomm$PRODUCT$snapdragon"]}