CVE-2025-47403CWE-125CWE-126

CVE-2025-47403

Medium · published May 4, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
11.4
In the wild
Unconfirmed
What it is

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00216 · 11.4th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-126 · Buffer Over-read
Published
2026-05-04T21:16Z
Affected products (257)
ProductVersionsFixed in
qualcomm/snapdragon_x65_5g_modem-rf_firmwareall versions—
qualcomm/snapdragon_x72_5g_modem-rf_firmwareall versions—
qualcomm/snapdragon_x75_5g_modem-rf_firmwareall versions—
qualcomm/srv1h_firmwareall versions—
qualcomm/srv1m_firmwareall versions—
qualcomm/sxr2230p_firmwareall versions—
qualcomm/sxr2250p_firmwareall versions—
qualcomm/sxr2330p_firmwareall versions—
qualcomm/sxr2350p_firmwareall versions—
qualcomm/trestles_firmwareall versions—
qualcomm/wcd9340_firmwareall versions—
qualcomm/wcd9370_firmwareall versions—
qualcomm/wcd9371_firmwareall versions—
qualcomm/wcd9375_firmwareall versions—
qualcomm/wcd9378_firmwareall versions—
qualcomm/wcd9378c_firmwareall versions—
qualcomm/wcd9380_firmwareall versions—
qualcomm/wcd9385_firmwareall versions—
qualcomm/wcd9390_firmwareall versions—
qualcomm/wcd9395_firmwareall versions—
qualcomm/wcn3950_firmwareall versions—
qualcomm/wcn3988_firmwareall versions—
qualcomm/wcn6450_firmwareall versions—
qualcomm/wcn6650_firmwareall versions—
qualcomm/wcn6755_firmwareall versions—
qualcomm/wcn7760_firmwareall versions—
qualcomm/wcn7860_firmwareall versions—
qualcomm/wcn7861_firmwareall versions—
qualcomm/wcn7880_firmwareall versions—
qualcomm/wcn7881_firmwareall versions—
qualcomm/wsa8810_firmwareall versions—
qualcomm/wsa8815_firmwareall versions—
qualcomm/wsa8830_firmwareall versions—
qualcomm/wsa8832_firmwareall versions—
qualcomm/wsa8835_firmwareall versions—
qualcomm/wsa8840_firmwareall versions—
qualcomm/wsa8845_firmwareall versions—
qualcomm/wsa8845h_firmwareall versions—
qualcomm/wsa8850_firmwareall versions—
qualcomm/wsa8850w_firmwareall versions—
qualcomm/ar8035_firmwareall versions—
qualcomm/cologne_firmwareall versions—
qualcomm/cq7790_firmwareall versions—
qualcomm/cq8725s_firmwareall versions—
qualcomm/cq8750m_firmwareall versions—
qualcomm/csr8811_firmwareall versions—
qualcomm/fastconnect_6200_firmwareall versions—
qualcomm/fastconnect_6700_firmwareall versions—
qualcomm/fastconnect_6900_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/fwa_gen_3_ultra_firmwareall versions—
qualcomm/fwa_gen_5_elite_firmwareall versions—
qualcomm/g2_gen_1_firmwareall versions—
qualcomm/g3x_gen_2_firmwareall versions—
qualcomm/immersive_home_214_firmwareall versions—
qualcomm/immersive_home_216_firmwareall versions—
qualcomm/immersive_home_316_firmwareall versions—
qualcomm/immersive_home_318_firmwareall versions—
qualcomm/immersive_home_3210_firmwareall versions—
qualcomm/immersive_home_326_firmwareall versions—
qualcomm/ipq5010_firmwareall versions—
qualcomm/ipq5028_firmwareall versions—
qualcomm/ipq5300_firmwareall versions—
qualcomm/ipq5302_firmwareall versions—
qualcomm/ipq5312_firmwareall versions—
qualcomm/ipq5332_firmwareall versions—
qualcomm/ipq6000_firmwareall versions—
qualcomm/ipq6010_firmwareall versions—
qualcomm/ipq6018_firmwareall versions—
qualcomm/ipq8076_firmwareall versions—
qualcomm/ipq8078_firmwareall versions—
qualcomm/ipq9008_firmwareall versions—
qualcomm/ipq9554_firmwareall versions—
qualcomm/ipq9570_firmwareall versions—
qualcomm/ipq9574_firmwareall versions—
qualcomm/iqx5121_firmwareall versions—
qualcomm/iqx7181_firmwareall versions—
qualcomm/kobuk_firmwareall versions—
qualcomm/lemans_au_lgit_firmwareall versions—
qualcomm/lemansau_firmwareall versions—
qualcomm/marina_firmwareall versions—
qualcomm/milos_firmwareall versions—
qualcomm/milos_iot_firmwareall versions—
qualcomm/molokai_firmwareall versions—
qualcomm/netrani_firmwareall versions—
qualcomm/qca8084_firmwareall versions—
qualcomm/qca8085_firmwareall versions—
qualcomm/qca8337_firmwareall versions—
qualcomm/qca8386_firmwareall versions—
qualcomm/qca8695au_firmwareall versions—
qualcomm/qca9888_firmwareall versions—
qualcomm/qca9889_firmwareall versions—
qualcomm/qcc2073_firmwareall versions—
qualcomm/qcc2076_firmwareall versions—
qualcomm/qcc710_firmwareall versions—
qualcomm/qcf8000_firmwareall versions—
qualcomm/qcf8001_firmwareall versions—
qualcomm/qcm4490_firmwareall versions—
qualcomm/qcm5430_firmwareall versions—
qualcomm/qcm6490_firmwareall versions—
qualcomm/qcn5022_firmwareall versions—
qualcomm/qcn5024_firmwareall versions—
qualcomm/qcn5052_firmwareall versions—
qualcomm/qcn5054_firmwareall versions—
qualcomm/qcn5122_firmwareall versions—
qualcomm/qcn5124_firmwareall versions—
qualcomm/qcn5152_firmwareall versions—
qualcomm/qcn5154_firmwareall versions—
qualcomm/qcn5164_firmwareall versions—
qualcomm/qcn6023_firmwareall versions—
qualcomm/qcn6024_firmwareall versions—
qualcomm/qcn6122_firmwareall versions—
qualcomm/qcn6132_firmwareall versions—
qualcomm/qcn6224_firmwareall versions—
qualcomm/qcn6274_firmwareall versions—
qualcomm/qcn6402_firmwareall versions—
qualcomm/qcn6412_firmwareall versions—
qualcomm/qcn6422_firmwareall versions—
qualcomm/qcn6432_firmwareall versions—
qualcomm/qcn9000_firmwareall versions—
qualcomm/qcn9001_firmwareall versions—
qualcomm/qcn9002_firmwareall versions—
qualcomm/qcn9003_firmwareall versions—
qualcomm/qcn9011_firmwareall versions—
qualcomm/qcn9012_firmwareall versions—
qualcomm/wsa8855c_firmwareall versions—
qualcomm/x1e80100_firmwareall versions—
qualcomm/x2000077_firmwareall versions—
qualcomm/x2000086_firmwareall versions—
qualcomm/x2000090_firmwareall versions—
qualcomm/x2000092_firmwareall versions—
qualcomm/x2000094_firmwareall versions—
qualcomm/xg101002_firmwareall versions—
qualcomm/xg101032_firmwareall versions—
qualcomm/xg101039_firmwareall versions—
qualcomm/xrv7209_firmwareall versions—
qualcomm/xrv9209_firmwareall versions—
qualcomm/networking_pro_1200_firmwareall versions—
qualcomm/networking_pro_1210_firmwareall versions—
qualcomm/networking_pro_1610_firmwareall versions—
qualcomm/networking_pro_400_firmwareall versions—
qualcomm/networking_pro_600_firmwareall versions—
qualcomm/networking_pro_610_firmwareall versions—
qualcomm/networking_pro_800_firmwareall versions—
qualcomm/networking_pro_810_firmwareall versions—
qualcomm/npro_a8_elite_firmwareall versions—
qualcomm/orne_firmwareall versions—
qualcomm/palawan25_firmwareall versions—
qualcomm/pandeiro_firmwareall versions—
qualcomm/qam8255p_firmwareall versions—
qualcomm/qam8397p_firmwareall versions—
qualcomm/qamsrv1h_firmwareall versions—
qualcomm/qamsrv1m_firmwareall versions—
qualcomm/qca0000_firmwareall versions—
qualcomm/qca4024_firmwareall versions—
qualcomm/qca6174a_firmwareall versions—
qualcomm/qca6391_firmwareall versions—
qualcomm/qca6554a_firmwareall versions—
qualcomm/qca6564au_firmwareall versions—
qualcomm/qca6574_firmwareall versions—
qualcomm/qca6574a_firmwareall versions—
qualcomm/qca6574au_firmwareall versions—
qualcomm/qca6584au_firmwareall versions—
qualcomm/qca6595_firmwareall versions—
qualcomm/qca6595au_firmwareall versions—
qualcomm/qca6678aq_firmwareall versions—
qualcomm/qca6688aq_firmwareall versions—
qualcomm/qca6696_firmwareall versions—
qualcomm/qca6698aq_firmwareall versions—
qualcomm/qca6777aq_firmwareall versions—
qualcomm/qca6787aq_firmwareall versions—
qualcomm/qca6797aq_firmwareall versions—
qualcomm/qca8072_firmwareall versions—
qualcomm/qca8075_firmwareall versions—
qualcomm/qca8080_firmwareall versions—
qualcomm/qca8081_firmwareall versions—
qualcomm/qca8082_firmwareall versions—
qualcomm/sm6475q_firmwareall versions—
qualcomm/sm6650p_firmwareall versions—
qualcomm/sm6850_firmwareall versions—
qualcomm/sm7425_firmwareall versions—
qualcomm/sm7435_firmwareall versions—
qualcomm/sm7435p_firmwareall versions—
qualcomm/sm7525_firmwareall versions—
qualcomm/sm7550_firmwareall versions—
qualcomm/sm7550p_firmwareall versions—
qualcomm/sm7635p_firmwareall versions—
qualcomm/sm7675_firmwareall versions—
qualcomm/sm7675p_firmwareall versions—
qualcomm/sm8425_firmwareall versions—
qualcomm/sm8475p_firmwareall versions—
qualcomm/sm8550p_firmwareall versions—
qualcomm/sm8635_firmwareall versions—
qualcomm/sm8635p_firmwareall versions—
qualcomm/sm8650q_firmwareall versions—
qualcomm/sm8735p_firmwareall versions—
qualcomm/sm8750p_firmwareall versions—
qualcomm/sm8845p_firmwareall versions—
qualcomm/snapdragon_4_gen_2_mobile_firmwareall versions—
qualcomm/snapdragon_6_gen_1_mobile_firmwareall versions—
qualcomm/snapdragon_6_gen_3_mobile_firmwareall versions—
qualcomm/snapdragon_6_gen_4_mobile_firmwareall versions—
qualcomm/snapdragon_7_gen_1_mobile_firmwareall versions—
qualcomm/snapdragon_7_gen_4_mobile_firmwareall versions—
qualcomm/snapdragon_7\+_gen_2_mobile_firmwareall versions—
qualcomm/snapdragon_7s_gen_3_mobile_firmwareall versions—
qualcomm/snapdragon_8_elite_firmwareall versions—
qualcomm/snapdragon_8_elite_gen_5_firmwareall versions—
qualcomm/snapdragon_8_gen_1_mobile_firmwareall versions—
qualcomm/snapdragon_8_gen_2_mobile_firmwareall versions—
qualcomm/snapdragon_8_gen_3_mobile_firmwareall versions—
qualcomm/snapdragon_8\+_gen_1_mobile_firmwareall versions—
qualcomm/snapdragon_8\+_gen_2_mobile_firmwareall versions—
qualcomm/snapdragon_ar1_gen_1_firmwareall versions—
qualcomm/snapdragon_ar1\+_gen_1_firmwareall versions—
qualcomm/snapdragon_auto_5g_modem-rf_gen_2_firmwareall versions—
qualcomm/snapdragon_x62_5g_modem-rf_firmwareall versions—
qualcomm/qcn9022_firmwareall versions—
qualcomm/qcn9024_firmwareall versions—
qualcomm/qcn9070_firmwareall versions—
qualcomm/qcn9100_firmwareall versions—
qualcomm/qcn9274_firmwareall versions—
qualcomm/qcs4490_firmwareall versions—
qualcomm/qcs6690_firmwareall versions—
qualcomm/qcs8550_firmwareall versions—
qualcomm/qfw7114_firmwareall versions—
qualcomm/qfw7124_firmwareall versions—
qualcomm/qln1083bd_firmwareall versions—
qualcomm/qln1086bd_firmwareall versions—
qualcomm/qmb415_firmwareall versions—
qualcomm/qmb715_firmwareall versions—
qualcomm/qmp1000_firmwareall versions—
qualcomm/qmp2001_firmwareall versions—
qualcomm/qpa1083bd_firmwareall versions—
qualcomm/qpa1086bd_firmwareall versions—
qualcomm/video_collaboration_vc3_firmwareall versions—
qualcomm/qxm1083_firmwareall versions—
qualcomm/qxm1086_firmwareall versions—
qualcomm/qxm1093_firmwareall versions—
qualcomm/qxm1094_firmwareall versions—
qualcomm/qxm1095_firmwareall versions—
qualcomm/qxm1096_firmwareall versions—
qualcomm/sa7255p_firmwareall versions—
qualcomm/sa7775p_firmwareall versions—
qualcomm/sa8255p_firmwareall versions—
qualcomm/sa8620p_firmwareall versions—
qualcomm/sa8770p_firmwareall versions—
qualcomm/sa9000p_firmwareall versions—
qualcomm/sar1165p_firmwareall versions—
qualcomm/sar2130p_firmwareall versions—
qualcomm/sc8380xp_firmwareall versions—
qualcomm/sd_8_gen1_5g_firmwareall versions—
qualcomm/sdx61_firmwareall versions—
qualcomm/sdx65m_firmwareall versions—
qualcomm/sdx81_firmwareall versions—
qualcomm/sm6450p_firmwareall versions—
qualcomm/sm6475p_firmwareall versions—
References (1)
EPSS history
Timeline
  • 04 MAY 16:43Z
    Buffer Over-read in WLAN Firmware
    cvelistv5