CVE-2025-47400

🗓️ 06 Apr 2026 15:33:44Reported by qualcommType

CVE-2025-47400: Buffer overread in computer vision due to copying data without destination size validation.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	13 Apr 202600:00	–	bdu_fstec
Circl	CVE-2025-47400	6 Apr 202617:31	–	circl
CNNVD	Qualcomm Chipsets 安全漏洞	6 Apr 202600:00	–	cnnvd
Cvelist	CVE-2025-47400 Buffer Over-read in Computer Vision	6 Apr 202615:33	–	cvelist
EUVD	EUVD-2025-209231	6 Apr 202618:33	–	euvd
NCSC	Vulnerabilities found in Google Android and Samsung Mobile devices	2 Jun 202608:00	–	ncsc
NVD	CVE-2025-47400	6 Apr 202616:16	–	nvd
Positive Technologies	PT-2026-30639	6 Apr 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-47400: Buffer Over-read	6 Apr 202600:00	–	rapid7
RedhatCVE	CVE-2025-47400	7 Apr 202617:04	–	redhatcve

NVD

Vulners

Node

AND

qualcomm pandeiro_firmwareMatch-

qualcomm pandeiroMatch-

Node

AND

qualcomm snapdragon_8_elite_gen_5_firmwareMatch-

qualcomm snapdragon_8_elite_gen_5Match-

Node

AND

qualcomm sw6100_firmwareMatch-

qualcomm sw6100Match-

Node

AND

qualcomm sw6100p_firmwareMatch-

qualcomm sw6100pMatch-

Node

AND

qualcomm themisto_firmwareMatch-

qualcomm themistoMatch-

Node

AND

qualcomm wcd9395_firmwareMatch-

qualcomm wcd9395Match-

Node

AND

qualcomm wcn7860_firmwareMatch-

qualcomm wcn7860Match-

Node

AND

qualcomm wcn7861_firmwareMatch-

qualcomm wcn7861Match-

Node

AND

qualcomm wsa8840_firmwareMatch-

qualcomm wsa8840Match-

Node

AND

qualcomm wsa8845_firmwareMatch-

qualcomm wsa8845Match-

Node

AND

qualcomm wsa8845h_firmwareMatch-

qualcomm wsa8845hMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Compute",
      "Snapdragon Wearables"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Pandeiro"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Elite Gen 5"
      },
      {
        "status": "affected",
        "version": "SW6100"
      },
      {
        "status": "affected",
        "version": "SW6100P"
      },
      {
        "status": "affected",
        "version": "Themisto"
      },
      {
        "status": "affected",
        "version": "WCD9395"
      },
      {
        "status": "affected",
        "version": "WCN7860"
      },
      {
        "status": "affected",
        "version": "WCN7861"
      },
      {
        "status": "affected",
        "version": "WSA8840"
      },
      {
        "status": "affected",
        "version": "WSA8845"
      },
      {
        "status": "affected",
        "version": "WSA8845H"
      }
    ]
  }
]

Source	Link
docs	www.docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html

30 Sep 2026 22:10Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.1

EPSS0.00095

SSVC

CWE-126