CVE-2025-47402

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Transient DOS when processing a received frame with an excessively large authentication information element.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-126CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Feb 2, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-474037.5Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.CVE-2025-474047.8Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.CVE-2025-474057.8Memory corruption when processing camera sensor input/output control codes with invalid output buffers.CVE-2025-474065.5Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.CVE-2025-474077.0Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.CVE-2025-474087.8Memory corruption when another driver calls an IOCTL with invalid input/output buffer.CVE-2025-47419.8A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown procesCVE-2025-474108.8Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could allow an attacker who hCVE-2025-474118.1A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that CVE-2025-474156.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CRESTRON TOUCHSCREENS x70 allows Relative PaCVE-2025-474165.9A vulnerability exists in the ConsoleFindCommandMatchList function in libsymproc. so imported by ctpd that may lead to unauthorized executioCVE-2025-474175.1Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. When Enable
CVE-2025-47402: Medium severity, CVSS 6.5 | Vulnix