CVE-2025-47403: Qualcomm, Inc. Snapdragon, грешка в паметта

Описание

Оригинално описание

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

Засегнати продукти

• Qualcomm, Inc. Snapdragon: AR8035; Cologne; CQ7790; CQ8725S; CQ8750M; CSR8811; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; FWA Gen 3 Ultra Platform; FWA Gen 5 Elite Platform; G2 Gen 1; G3x Gen 2; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5010; IPQ5028; IPQ5300; IPQ5302; IPQ5312; IPQ5332; IPQ6000; IPQ6010; IPQ6018; IPQ8076; IPQ8078; IPQ9008; IPQ9554; IPQ9570; IPQ9574; IQX5121; IQX7181; Kobuk; LeMans_AU_LGIT; LeMansAU; Marina; Milos; Milos_IOT; Molokai; Netrani; Networking Pro 1200 Platform; Networking Pro 1210 Platform; Networking Pro 1610 Platform; Networking Pro 400 Platform; Networking Pro 600 Platform; Networking Pro 610 Platform; Networking Pro 800 Platform; Networking Pro 810 Platform; NPro A8 Elite Platform; Orne; Palawan25; Pandeiro; QAM8255P; QAM8397P; QAMSRV1H; QAMSRV1M; QCA0000; QCA4024; QCA6174A; QCA6391; QCA6554A; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6584AU; QCA6595; QCA6595AU; QCA6678AQ; QCA6688AQ; QCA6696; QCA6698AQ; QCA6777AQ; QCA6787AQ; QCA6797AQ; QCA8072; QCA8075; QCA8080; QCA8081; QCA8082; QCA8084; QCA8085; QCA8337; QCA8386; QCA8695AU; QCA9888; QCA9889; QCC2073; QCC2076; QCC710; QCF8000; QCF8001; QCM4490; QCM5430; QCM6490; QCN5022; QCN5024; QCN5052; QCN5054; QCN5122; QCN5124; QCN5152; QCN5154; QCN5164; QCN6023; QCN6024; QCN6122; QCN6132; QCN6224; QCN6274; QCN6402; QCN6412; QCN6422; QCN6432; QCN9000; QCN9001; QCN9002; QCN9003; QCN9011; QCN9012; QCN9022; QCN9024; QCN9070; QCN9100; QCN9274; QCS4490; QCS6690; QCS8550; QFW7114; QFW7124; QLN1083BD; QLN1086BD; QMB415; QMB715; QMP1000; QMP2001; QPA1083BD; QPA1086BD; Qualcomm Video Collaboration VC3 Platform; QXM1083; QXM1086; QXM1093; QXM1094; QXM1095; QXM1096; SA7255P; SA7775P; SA8255P; SA8620P; SA8770P; SA9000P; SAR1165P; SAR2130P; SC8380XP; SD 8 Gen1 5G; SDX61; SDX65M; SDX81; SM6450P; SM6475P; SM6475Q; SM6650P; SM6850; SM7425; SM7435; SM7435P; SM7525; SM7550; SM7550P; SM7635P; SM7675; SM7675P; SM8425; SM8475P; SM8550P; SM8635; SM8635P; SM8650Q; SM8735P; SM8750P; SM8845P; Snapdragon 4 Gen 2 Mobile Platform; Snapdragon 6 Gen 1 Mobile Platform; Snapdragon 6 Gen 3 Mobile Platform; Snapdragon 6 Gen 4 Mobile Platform; Snapdragon 7 Gen 1 Mobile Platform; Snapdragon 7 Gen 4 Mobile Platform; Snapdragon 7+ Gen 2 Mobile Platform; Snapdragon 7s Gen 3 Mobile Platform; Snapdragon 8 Elite; Snapdragon 8 Elite Gen 5; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8 Gen 3 Mobile Platform; Snapdragon 8+ Gen 1 Mobile Platform; Snapdragon 8+ Gen 2 Mobile Platform; Snapdragon AR1 Gen 1 Platform; Snapdragon AR1+ Gen 1 Platform; Snapdragon Auto 5G Modem-RF Gen 2; Snapdragon X62 5G Modem-RF System; Snapdragon X65 5G Modem-RF System; Snapdragon X72 5G Modem-RF System; Snapdragon X75 5G Modem-RF System; SRV1H; SRV1M; SXR2230P; SXR2250P; SXR2330P; SXR2350P; Trestles; WCD9340; WCD9370; WCD9371; WCD9375; WCD9378; WCD9378C; WCD9380; WCD9385; WCD9390; WCD9395; WCN3950; WCN3988; WCN6450; WCN6650; WCN6755; WCN7760; WCN7860; WCN7861; WCN7880; WCN7881; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845; WSA8845H; WSA8850; WSA8850W; WSA8855C; X1E80100; X2000077; X2000086; X2000090; X2000092; X2000094; XG101002; XG101032; XG101039; XRV7209; XRV9209

Вид слабост

• CWE-126 Четене след края на буфера

История

Други уязвимости в Qualcomm, Inc. Snapdragon

• 7.8CVE-2026-57559
• 7.8CVE-2026-57555
• 7.8CVE-2026-57554
• 7.5CVE-2026-57546
• 7.8CVE-2026-57545

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-47403
• https://nvd.nist.gov/vuln/detail/CVE-2025-47403
• https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html