synced 2 MIN AGO
01 Record

CVE-2025-47402

Buffer Over-read in WLAN Firmware

MediumPUBLISHEDCNA: qualcomm
CNA base score6.5 CVSS v3.xCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
View raw JSON

02 Description

Buffer Over-read in WLAN Firmware

03 Exploitation and scoring

Exploitation
Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
SSVC decision
  • ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
  • AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
  • Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.
CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.
EPSS probability
0.16% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 5.4% of scored records. A rank, not a probability.
NVD base score
6.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD analysis status
Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2026-02-02 15:20Z8 MO AGO
Last updated
2026-02-02 15:51Z8 MO AGO
Reserved
2025-05-06
Assigning CNA
qualcomm
Record state
PUBLISHED
Severity
Medium (CVSS 6.5)
CNA CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
Data version
5.2
Document digest
41b5e04321c29158b7ff5357ae15a5361f5683b36015b7c02d6e3c988a3a81e5

05 Affected products

VendorProductVersionsPlatforms
Qualcomm, Inc.SnapdragonAR8035, Cologne, FastConnect 6900, FastConnect 7800, FWA Gen 3 Ultra Platform, LeMans_AU_LGIT, LeMansAU, Orne, Palawan25, QAM8255P, QAMSRV1H, QAMSRV1M, QCA6391, QCA6554A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6678AQ, QCA6688AQ, QCA6696, QCA6698AQ, QCA6698AU, QCA6777AQ, QCA6787AQ, QCA6797AQ, QCA8081, QCA8337, QCC2073, QCC2076, QCC710, QCN6224, QCN6274, QCN9011, QCN9012, QCS8550, QFW7114, QFW7124, QMP1000, SA7255P, SA7775P, SA8255P, SA8620P, SA8770P, SA9000P, SAR2130P, SM7675, SM7675P, SM8635, SM8635P, SM8650Q, SM8750P, Snapdragon 8 Elite, Snapdragon 8 Gen 3 Mobile Platform, Snapdragon Auto 5G Modem-RF Gen 2, Snapdragon X72 5G Modem-RF System, Snapdragon X75 5G Modem-RF System, SRV1H, SRV1M, SSG2115P, SSG2125P, SXR1230P, SXR2250P, WCD9340, WCD9370, WCD9375, WCD9378, WCD9378C, WCD9380, WCD9385, WCD9390, WCD9395, WCN6755, WCN7860, WCN7861, WCN7880, WCN7881, WSA8830, WSA8832, WSA8835, WSA8840, WSA8845, WSA8845H, X2000077, X2000086, X2000090, X2000092, X2000094, XG101002, XG101032, XG101039Snapdragon Auto, Snapdragon CCW, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MC, Snapdragon Mobile, Snapdragon WBC

06 References