Buffer Over-read in WLAN HAL_CVE-2025-47328

7.5 / 10

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Transient DOS while processing power control requests with invalid antenna or stream values.

Basic Information

ID CVE-2025-47328

Source qualcomm

Published Sep 24, 2025 at 15:33

Affected Product

Vendor Qualcomm, Inc.

Product Snapdragon

Version FastConnect 7800

Affected Versions Qualcomm, Inc. Snapdragon FastConnect 7800
Qualcomm, Inc. Snapdragon Immersive Home 3210 Platform
Qualcomm, Inc. Snapdragon Immersive Home 326 Platform
Qualcomm, Inc. Snapdragon IPQ5300
Qualcomm, Inc. Snapdragon IPQ5302
Qualcomm, Inc. Snapdragon IPQ5312
Qualcomm, Inc. Snapdragon IPQ5332
Qualcomm, Inc. Snapdragon IPQ5424
Qualcomm, Inc. Snapdragon IPQ9008
Qualcomm, Inc. Snapdragon IPQ9048
Qualcomm, Inc. Snapdragon IPQ9554
Qualcomm, Inc. Snapdragon IPQ9570
Qualcomm, Inc. Snapdragon IPQ9574
Qualcomm, Inc. Snapdragon QCA0000
Qualcomm, Inc. Snapdragon QCA8075
Qualcomm, Inc. Snapdragon QCA8080
Qualcomm, Inc. Snapdragon QCA8081
Qualcomm, Inc. Snapdragon QCA8082
Qualcomm, Inc. Snapdragon QCA8084
Qualcomm, Inc. Snapdragon QCA8085
Qualcomm, Inc. Snapdragon QCA8101
Qualcomm, Inc. Snapdragon QCA8102
Qualcomm, Inc. Snapdragon QCA8111
Qualcomm, Inc. Snapdragon QCA8112
Qualcomm, Inc. Snapdragon QCA8384
Qualcomm, Inc. Snapdragon QCA8385
Qualcomm, Inc. Snapdragon QCA8386
Qualcomm, Inc. Snapdragon QCC710
Qualcomm, Inc. Snapdragon QCF8000
Qualcomm, Inc. Snapdragon QCF8001
Qualcomm, Inc. Snapdragon QCN5124
Qualcomm, Inc. Snapdragon QCN5224
Qualcomm, Inc. Snapdragon QCN6224
Qualcomm, Inc. Snapdragon QCN6274
Qualcomm, Inc. Snapdragon QCN6402
Qualcomm, Inc. Snapdragon QCN6412
Qualcomm, Inc. Snapdragon QCN6422
Qualcomm, Inc. Snapdragon QCN6432
Qualcomm, Inc. Snapdragon QCN9000
Qualcomm, Inc. Snapdragon QCN9012
Qualcomm, Inc. Snapdragon QCN9024
Qualcomm, Inc. Snapdragon QCN9074
Qualcomm, Inc. Snapdragon QCN9160
Qualcomm, Inc. Snapdragon QCN9274
Qualcomm, Inc. Snapdragon QFW7114
Qualcomm, Inc. Snapdragon QFW7124
Qualcomm, Inc. Snapdragon QMP1000
Qualcomm, Inc. Snapdragon QXM8083
Qualcomm, Inc. Snapdragon SM8735
Qualcomm, Inc. Snapdragon SM8750
Qualcomm, Inc. Snapdragon SM8750P
Qualcomm, Inc. Snapdragon Snapdragon X72 5G Modem-RF System
Qualcomm, Inc. Snapdragon Snapdragon X75 5G Modem-RF System
Qualcomm, Inc. Snapdragon SW-only
Qualcomm, Inc. Snapdragon WCD9340
Qualcomm, Inc. Snapdragon WCD9378
Qualcomm, Inc. Snapdragon WCD9395
Qualcomm, Inc. Snapdragon WCN7750
Qualcomm, Inc. Snapdragon WCN7860
Qualcomm, Inc. Snapdragon WCN7861
Qualcomm, Inc. Snapdragon WCN7880
Qualcomm, Inc. Snapdragon WCN7881
Qualcomm, Inc. Snapdragon WSA8830
Qualcomm, Inc. Snapdragon WSA8832
Qualcomm, Inc. Snapdragon WSA8835
Qualcomm, Inc. Snapdragon WSA8840
Qualcomm, Inc. Snapdragon WSA8845
Qualcomm, Inc. Snapdragon WSA8845H

CWE Classification

CWE-126

References

docs.qualcomm.com /product/publicresources/securitybulletin/september-2025-bulletin.html

{
    "lastseen": "",
    "description": "Transient DOS while processing power control requests with invalid antenna or stream values.",
    "published": "2025-09-24T15:33:54.999Z",
    "modified": "2025-09-24T15:33:54.999Z",
    "type": "cve",
    "title": "Buffer Over-read in WLAN HAL",
    "source": "qualcomm",
    "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html",
    "id": "CVE-2025-47328",
    "bulletinFamily": "",
    "cwe": [
        "CWE-126"
    ],
    "cvelist": null,
    "sourceData": "Qualcomm, Inc. Snapdragon FastConnect 7800\nQualcomm, Inc. Snapdragon Immersive Home 3210 Platform\nQualcomm, Inc. Snapdragon Immersive Home 326 Platform\nQualcomm, Inc. Snapdragon IPQ5300\nQualcomm, Inc. Snapdragon IPQ5302\nQualcomm, Inc. Snapdragon IPQ5312\nQualcomm, Inc. Snapdragon IPQ5332\nQualcomm, Inc. Snapdragon IPQ5424\nQualcomm, Inc. Snapdragon IPQ9008\nQualcomm, Inc. Snapdragon IPQ9048\nQualcomm, Inc. Snapdragon IPQ9554\nQualcomm, Inc. Snapdragon IPQ9570\nQualcomm, Inc. Snapdragon IPQ9574\nQualcomm, Inc. Snapdragon QCA0000\nQualcomm, Inc. Snapdragon QCA8075\nQualcomm, Inc. Snapdragon QCA8080\nQualcomm, Inc. Snapdragon QCA8081\nQualcomm, Inc. Snapdragon QCA8082\nQualcomm, Inc. Snapdragon QCA8084\nQualcomm, Inc. Snapdragon QCA8085\nQualcomm, Inc. Snapdragon QCA8101\nQualcomm, Inc. Snapdragon QCA8102\nQualcomm, Inc. Snapdragon QCA8111\nQualcomm, Inc. Snapdragon QCA8112\nQualcomm, Inc. Snapdragon QCA8384\nQualcomm, Inc. Snapdragon QCA8385\nQualcomm, Inc. Snapdragon QCA8386\nQualcomm, Inc. Snapdragon QCC710\nQualcomm, Inc. Snapdragon QCF8000\nQualcomm, Inc. Snapdragon QCF8001\nQualcomm, Inc. Snapdragon QCN5124\nQualcomm, Inc. Snapdragon QCN5224\nQualcomm, Inc. Snapdragon QCN6224\nQualcomm, Inc. Snapdragon QCN6274\nQualcomm, Inc. Snapdragon QCN6402\nQualcomm, Inc. Snapdragon QCN6412\nQualcomm, Inc. Snapdragon QCN6422\nQualcomm, Inc. Snapdragon QCN6432\nQualcomm, Inc. Snapdragon QCN9000\nQualcomm, Inc. Snapdragon QCN9012\nQualcomm, Inc. Snapdragon QCN9024\nQualcomm, Inc. Snapdragon QCN9074\nQualcomm, Inc. Snapdragon QCN9160\nQualcomm, Inc. Snapdragon QCN9274\nQualcomm, Inc. Snapdragon QFW7114\nQualcomm, Inc. Snapdragon QFW7124\nQualcomm, Inc. Snapdragon QMP1000\nQualcomm, Inc. Snapdragon QXM8083\nQualcomm, Inc. Snapdragon SM8735\nQualcomm, Inc. Snapdragon SM8750\nQualcomm, Inc. Snapdragon SM8750P\nQualcomm, Inc. Snapdragon Snapdragon X72 5G Modem-RF System\nQualcomm, Inc. Snapdragon Snapdragon X75 5G Modem-RF System\nQualcomm, Inc. Snapdragon SW-only\nQualcomm, Inc. Snapdragon WCD9340\nQualcomm, Inc. Snapdragon WCD9378\nQualcomm, Inc. Snapdragon WCD9395\nQualcomm, Inc. Snapdragon WCN7750\nQualcomm, Inc. Snapdragon WCN7860\nQualcomm, Inc. Snapdragon WCN7861\nQualcomm, Inc. Snapdragon WCN7880\nQualcomm, Inc. Snapdragon WCN7881\nQualcomm, Inc. Snapdragon WSA8830\nQualcomm, Inc. Snapdragon WSA8832\nQualcomm, Inc. Snapdragon WSA8835\nQualcomm, Inc. Snapdragon WSA8840\nQualcomm, Inc. Snapdragon WSA8845\nQualcomm, Inc. Snapdragon WSA8845H",
    "sourceHref": "",
    "cvss": {
        "score": 7.5,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Snapdragon",
    "version": "FastConnect 7800",
    "vendor": "Qualcomm, Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}