CVE-2025-47401

HighCVSS 7.5/10Last modified Oct 7, 2026

Description

Transient DOS when processing target power rate tables during channel configuration.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-126 CWE-125

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; Cologne; CQ7790; CQ8725S; CQ8750M; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; FWA Gen 3 Ultra Platform; G2 Gen 1; G3x Gen 2; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5300; IPQ5302; IPQ5312; IPQ5332; IPQ9008

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.htmlVendor Advisory

Timeline

Published: May 4, 2026
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-474026.5Transient DOS when processing a received frame with an excessively large authentication information element.CVE-2025-474037.5Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.CVE-2025-474047.8Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.CVE-2025-474057.8Memory corruption when processing camera sensor input/output control codes with invalid output buffers.CVE-2025-474065.5Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.CVE-2025-474077.0Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.CVE-2025-474087.8Memory corruption when another driver calls an IOCTL with invalid input/output buffer.CVE-2025-47419.8A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown proces CVE-2025-474108.8Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could allow an attacker who h CVE-2025-474118.1A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that CVE-2025-474156.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CRESTRON TOUCHSCREENS x70 allows Relative Pa CVE-2025-474165.9A vulnerability exists in the ConsoleFindCommandMatchList function in libsymproc. so imported by ctpd that may lead to unauthorized executio