Buffer Over-read in Computer Vision_CVE-2025-47400

7.1 / 10

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

Cryptographic issue while copying data to a destination buffer without validating its size.

Basic Information

ID CVE-2025-47400

Source qualcomm

Published Apr 6, 2026 at 15:33

Modified Apr 7, 2026 at 03:55

Affected Product

Vendor Qualcomm, Inc.

Product Snapdragon

Version Pandeiro

Affected Versions Qualcomm, Inc. Snapdragon Pandeiro
Qualcomm, Inc. Snapdragon Snapdragon 8 Elite Gen 5
Qualcomm, Inc. Snapdragon SW6100
Qualcomm, Inc. Snapdragon SW6100P
Qualcomm, Inc. Snapdragon Themisto
Qualcomm, Inc. Snapdragon WCD9395
Qualcomm, Inc. Snapdragon WCN7860
Qualcomm, Inc. Snapdragon WCN7861
Qualcomm, Inc. Snapdragon WSA8840
Qualcomm, Inc. Snapdragon WSA8845
Qualcomm, Inc. Snapdragon WSA8845H

CWE Classification

CWE-126

References

docs.qualcomm.com /product/publicresources/securitybulletin/april-2026-bulletin.html

{
    "lastseen": "",
    "description": "Cryptographic issue while copying data to a destination buffer without validating its size.",
    "published": "2026-04-06T15:33:44.933Z",
    "modified": "2026-04-07T03:55:46.892Z",
    "type": "cve",
    "title": "Buffer Over-read in Computer Vision",
    "source": "qualcomm",
    "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html",
    "id": "CVE-2025-47400",
    "bulletinFamily": "",
    "cwe": [
        "CWE-126"
    ],
    "cvelist": null,
    "sourceData": "Qualcomm, Inc. Snapdragon Pandeiro\nQualcomm, Inc. Snapdragon Snapdragon 8 Elite Gen 5\nQualcomm, Inc. Snapdragon SW6100\nQualcomm, Inc. Snapdragon SW6100P\nQualcomm, Inc. Snapdragon Themisto\nQualcomm, Inc. Snapdragon WCD9395\nQualcomm, Inc. Snapdragon WCN7860\nQualcomm, Inc. Snapdragon WCN7861\nQualcomm, Inc. Snapdragon WSA8840\nQualcomm, Inc. Snapdragon WSA8845\nQualcomm, Inc. Snapdragon WSA8845H",
    "sourceHref": "",
    "cvss": {
        "score": 7.1,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Snapdragon",
    "version": "Pandeiro",
    "vendor": "Qualcomm, Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}