{"id":51255,"date":"2026-05-04T12:09:40","date_gmt":"2026-05-04T12:09:40","guid":{"rendered":"https:\/\/zero.redgem.net\/?p=51255"},"modified":"2026-05-04T12:09:40","modified_gmt":"2026-05-04T12:09:40","slug":"buffer-over-read-in-wlan-hal","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=51255","title":{"rendered":"Buffer Over-read in WLAN HAL_CVE-2025-47401"},"content":{"rendered":"<p>{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Transient DOS when processing target power rate tables during channel configuration.&#8221;,&#8221;published&#8221;:&#8221;2026-05-04T16:43:07.614Z&#8221;,&#8221;modified&#8221;:&#8221;2026-05-04T16:43:07.614Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Buffer Over-read in WLAN HAL&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/may-2026-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-47401&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-126&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc. Snapdragon AR8035\\nQualcomm, Inc. Snapdragon Cologne\\nQualcomm, Inc. Snapdragon CQ7790\\nQualcomm, Inc. Snapdragon CQ8725S\\nQualcomm, Inc. Snapdragon CQ8750M\\nQualcomm, Inc. Snapdragon FastConnect 6200\\nQualcomm, Inc. Snapdragon FastConnect 6700\\nQualcomm, Inc. Snapdragon FastConnect 6900\\nQualcomm, Inc. Snapdragon FastConnect 7800\\nQualcomm, Inc. Snapdragon Flight RB5 5G Platform\\nQualcomm, Inc. Snapdragon FWA Gen 3 Ultra Platform\\nQualcomm, Inc. Snapdragon G2 Gen 1\\nQualcomm, Inc. Snapdragon G3x Gen 2\\nQualcomm, Inc. Snapdragon Immersive Home 3210 Platform\\nQualcomm, Inc. Snapdragon Immersive Home 326 Platform\\nQualcomm, Inc. Snapdragon IPQ5300\\nQualcomm, Inc. Snapdragon IPQ5302\\nQualcomm, Inc. Snapdragon IPQ5312\\nQualcomm, Inc. Snapdragon IPQ5332\\nQualcomm, Inc. Snapdragon IPQ9008\\nQualcomm, Inc. Snapdragon IPQ9554\\nQualcomm, Inc. Snapdragon IPQ9570\\nQualcomm, Inc. Snapdragon IPQ9574\\nQualcomm, Inc. Snapdragon IQ6 Series Platform\\nQualcomm, Inc. Snapdragon IQ8 Series Platform\\nQualcomm, Inc. Snapdragon IQ9 Series Platform\\nQualcomm, Inc. Snapdragon IQX5121\\nQualcomm, Inc. Snapdragon IQX7181\\nQualcomm, Inc. Snapdragon LeMans_AU_LGIT\\nQualcomm, Inc. Snapdragon LeMansAU\\nQualcomm, Inc. Snapdragon Marina\\nQualcomm, Inc. Snapdragon Milos\\nQualcomm, Inc. Snapdragon Milos_IOT\\nQualcomm, Inc. Snapdragon Molokai\\nQualcomm, Inc. Snapdragon Monaco_IOT\\nQualcomm, Inc. Snapdragon Netrani\\nQualcomm, Inc. Snapdragon Networking Pro 1200 Platform\\nQualcomm, Inc. Snapdragon Networking Pro 1210 Platform\\nQualcomm, Inc. Snapdragon Networking Pro 1610 Platform\\nQualcomm, Inc. Snapdragon Networking Pro 610 Platform\\nQualcomm, Inc. Snapdragon Networking Pro 810 Platform\\nQualcomm, Inc. Snapdragon Orne\\nQualcomm, Inc. Snapdragon Palawan25\\nQualcomm, Inc. Snapdragon Pandeiro\\nQualcomm, Inc. Snapdragon QAM8255P\\nQualcomm, Inc. Snapdragon QAM8295P\\nQualcomm, Inc. Snapdragon QAM8397P\\nQualcomm, Inc. Snapdragon QAMSRV1H\\nQualcomm, Inc. Snapdragon QAMSRV1M\\nQualcomm, Inc. Snapdragon QCA0000\\nQualcomm, Inc. Snapdragon QCA2062\\nQualcomm, Inc. Snapdragon QCA2064\\nQualcomm, Inc. Snapdragon QCA2065\\nQualcomm, Inc. Snapdragon QCA2066\\nQualcomm, Inc. Snapdragon QCA6174A\\nQualcomm, Inc. Snapdragon QCA6391\\nQualcomm, Inc. Snapdragon QCA6554A\\nQualcomm, Inc. Snapdragon QCA6564AU\\nQualcomm, Inc. Snapdragon QCA6574\\nQualcomm, Inc. Snapdragon QCA6574A\\nQualcomm, Inc. Snapdragon QCA6574AU\\nQualcomm, Inc. Snapdragon QCA6584AU\\nQualcomm, Inc. Snapdragon QCA6595\\nQualcomm, Inc. Snapdragon QCA6595AU\\nQualcomm, Inc. Snapdragon QCA6678AQ\\nQualcomm, Inc. Snapdragon QCA6688AQ\\nQualcomm, Inc. Snapdragon QCA6696\\nQualcomm, Inc. Snapdragon QCA6698AQ\\nQualcomm, Inc. Snapdragon QCA6777AQ\\nQualcomm, Inc. Snapdragon QCA6787AQ\\nQualcomm, Inc. Snapdragon QCA6797AQ\\nQualcomm, Inc. Snapdragon QCA8075\\nQualcomm, Inc. Snapdragon QCA8080\\nQualcomm, Inc. Snapdragon QCA8081\\nQualcomm, Inc. Snapdragon QCA8082\\nQualcomm, Inc. Snapdragon QCA8084\\nQualcomm, Inc. Snapdragon QCA8085\\nQualcomm, Inc. Snapdragon QCA8101\\nQualcomm, Inc. Snapdragon QCA8102\\nQualcomm, Inc. Snapdragon QCA8111\\nQualcomm, Inc. Snapdragon QCA8112\\nQualcomm, Inc. Snapdragon QCA8337\\nQualcomm, Inc. Snapdragon QCA8384\\nQualcomm, Inc. Snapdragon QCA8385\\nQualcomm, Inc. Snapdragon QCA8386\\nQualcomm, Inc. Snapdragon QCA8695AU\\nQualcomm, Inc. Snapdragon QCC710\\nQualcomm, Inc. Snapdragon QCF8000\\nQualcomm, Inc. Snapdragon QCF8001\\nQualcomm, Inc. Snapdragon QCM4490\\nQualcomm, Inc. Snapdragon QCM5430\\nQualcomm, Inc. Snapdragon QCM6490\\nQualcomm, Inc. Snapdragon QCN5124\\nQualcomm, Inc. Snapdragon QCN5154\\nQualcomm, Inc. Snapdragon QCN5224\\nQualcomm, Inc. Snapdragon QCN6024\\nQualcomm, Inc. Snapdragon QCN6224\\nQualcomm, Inc. Snapdragon QCN6274\\nQualcomm, Inc. Snapdragon QCN6402\\nQualcomm, Inc. Snapdragon QCN6412\\nQualcomm, Inc. Snapdragon QCN6422\\nQualcomm, Inc. Snapdragon QCN6432\\nQualcomm, Inc. Snapdragon QCN9000\\nQualcomm, Inc. Snapdragon QCN9011\\nQualcomm, Inc. Snapdragon QCN9012\\nQualcomm, Inc. Snapdragon QCN9024\\nQualcomm, Inc. Snapdragon QCN9160\\nQualcomm, Inc. Snapdragon QCN9274\\nQualcomm, Inc. Snapdragon QCS4490\\nQualcomm, Inc. Snapdragon QCS6690\\nQualcomm, Inc. Snapdragon QCS8550\\nQualcomm, Inc. Snapdragon QEP8111\\nQualcomm, Inc. Snapdragon QFW7114\\nQualcomm, Inc. Snapdragon QFW7124\\nQualcomm, Inc. Snapdragon QLN1083BD\\nQualcomm, Inc. Snapdragon QLN1086BD\\nQualcomm, Inc. Snapdragon QMB415\\nQualcomm, Inc. Snapdragon QMB715\\nQualcomm, Inc. Snapdragon QMP1000\\nQualcomm, Inc. Snapdragon QMP2001\\nQualcomm, Inc. Snapdragon QPA1083BD\\nQualcomm, Inc. Snapdragon QPA1086BD\\nQualcomm, Inc. Snapdragon QRB5165M\\nQualcomm, Inc. Snapdragon QRB5165N\\nQualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC3 Platform\\nQualcomm, Inc. Snapdragon QXM1083\\nQualcomm, Inc. Snapdragon QXM1086\\nQualcomm, Inc. Snapdragon QXM1093\\nQualcomm, Inc. Snapdragon QXM1094\\nQualcomm, Inc. Snapdragon QXM1095\\nQualcomm, Inc. Snapdragon QXM1096\\nQualcomm, Inc. Snapdragon QXM8083\\nQualcomm, Inc. Snapdragon Robotics RB5 Platform\\nQualcomm, Inc. Snapdragon SA510M\\nQualcomm, Inc. Snapdragon SA6155P\\nQualcomm, Inc. Snapdragon SA7255P\\nQualcomm, Inc. Snapdragon SA7775P\\nQualcomm, Inc. Snapdragon SA8155P\\nQualcomm, Inc. Snapdragon SA8195P\\nQualcomm, Inc. Snapdragon SA8255P\\nQualcomm, Inc. Snapdragon SA8295P\\nQualcomm, Inc. Snapdragon SA8620P\\nQualcomm, Inc. Snapdragon SA8770P\\nQualcomm, Inc. Snapdragon SA9000P\\nQualcomm, Inc. Snapdragon SAR1165P\\nQualcomm, Inc. Snapdragon SAR2130P\\nQualcomm, Inc. Snapdragon SC8380XP\\nQualcomm, Inc. Snapdragon SD 8 Gen1 5G\\nQualcomm, Inc. Snapdragon SDX61\\nQualcomm, Inc. Snapdragon SM6450P\\nQualcomm, Inc. Snapdragon SM6475P\\nQualcomm, Inc. Snapdragon SM6475Q\\nQualcomm, Inc. Snapdragon SM6650P\\nQualcomm, Inc. Snapdragon SM6850\\nQualcomm, Inc. Snapdragon SM7425\\nQualcomm, Inc. Snapdragon SM7435\\nQualcomm, Inc. Snapdragon SM7435P\\nQualcomm, Inc. Snapdragon SM7525\\nQualcomm, Inc. Snapdragon SM7550\\nQualcomm, Inc. Snapdragon SM7550P\\nQualcomm, Inc. Snapdragon SM7635P\\nQualcomm, Inc. Snapdragon SM7675\\nQualcomm, Inc. Snapdragon SM7675P\\nQualcomm, Inc. Snapdragon SM8425\\nQualcomm, Inc. Snapdragon SM8475P\\nQualcomm, Inc. Snapdragon SM8550P\\nQualcomm, Inc. Snapdragon SM8635\\nQualcomm, Inc. Snapdragon SM8635P\\nQualcomm, Inc. Snapdragon SM8650Q\\nQualcomm, Inc. Snapdragon SM8735P\\nQualcomm, Inc. Snapdragon SM8750P\\nQualcomm, Inc. Snapdragon SM8845P\\nQualcomm, Inc. Snapdragon Snapdragon 4 Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 3 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 4 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 7 Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 7 Gen 4 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 7+ Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 7s Gen 3 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8 Elite\\nQualcomm, Inc. Snapdragon Snapdragon 8 Elite Gen 5\\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 3 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8+ Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8+ Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 888 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 888+ 5G Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8cx Gen 3 Compute Platform\\nQualcomm, Inc. Snapdragon Snapdragon AR1 Gen 1 Platform\\nQualcomm, Inc. Snapdragon Snapdragon AR1+ Gen 1 Platform\\nQualcomm, Inc. Snapdragon Snapdragon Auto 5G Modem-RF\\nQualcomm, Inc. Snapdragon Snapdragon Auto 5G Modem-RF Gen 2\\nQualcomm, Inc. Snapdragon Snapdragon X32 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon X35 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon X62 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon X65 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon X72 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon X75 5G Modem-RF System\\nQualcomm, Inc. Snapdragon SRV1H\\nQualcomm, Inc. Snapdragon SRV1M\\nQualcomm, Inc. Snapdragon SW-only\\nQualcomm, Inc. Snapdragon SXR2230P\\nQualcomm, Inc. Snapdragon SXR2250P\\nQualcomm, Inc. Snapdragon SXR2330P\\nQualcomm, Inc. Snapdragon SXR2350P\\nQualcomm, Inc. Snapdragon WCD9340\\nQualcomm, Inc. Snapdragon WCD9370\\nQualcomm, Inc. Snapdragon WCD9371\\nQualcomm, Inc. Snapdragon WCD9375\\nQualcomm, Inc. Snapdragon WCD9378\\nQualcomm, Inc. Snapdragon WCD9378C\\nQualcomm, Inc. Snapdragon WCD9380\\nQualcomm, Inc. Snapdragon WCD9385\\nQualcomm, Inc. Snapdragon WCD9390\\nQualcomm, Inc. Snapdragon WCD9395\\nQualcomm, Inc. Snapdragon WCN3950\\nQualcomm, Inc. Snapdragon WCN3988\\nQualcomm, Inc. Snapdragon WCN6450\\nQualcomm, Inc. Snapdragon WCN6650\\nQualcomm, Inc. Snapdragon WCN6755\\nQualcomm, Inc. Snapdragon WCN7760\\nQualcomm, Inc. Snapdragon WCN7860\\nQualcomm, Inc. Snapdragon WCN7861\\nQualcomm, Inc. Snapdragon WCN7880\\nQualcomm, Inc. Snapdragon WCN7881\\nQualcomm, Inc. Snapdragon WSA8810\\nQualcomm, Inc. Snapdragon WSA8815\\nQualcomm, Inc. Snapdragon WSA8830\\nQualcomm, Inc. Snapdragon WSA8832\\nQualcomm, Inc. Snapdragon WSA8835\\nQualcomm, Inc. Snapdragon WSA8840\\nQualcomm, Inc. Snapdragon WSA8845\\nQualcomm, Inc. Snapdragon WSA8845H\\nQualcomm, Inc. Snapdragon WSA8850\\nQualcomm, Inc. Snapdragon WSA8850W\\nQualcomm, Inc. Snapdragon WSA8855C\\nQualcomm, Inc. Snapdragon X1E80100\\nQualcomm, Inc. Snapdragon X2000077\\nQualcomm, Inc. Snapdragon X2000086\\nQualcomm, Inc. Snapdragon X2000090\\nQualcomm, Inc. Snapdragon X2000092\\nQualcomm, Inc. Snapdragon X2000094\\nQualcomm, Inc. Snapdragon XG101002\\nQualcomm, Inc. Snapdragon XG101032\\nQualcomm, Inc. Snapdragon XG101039\\nQualcomm, Inc. Snapdragon XRV7209\\nQualcomm, Inc. Snapdragon XRV9209&#8243;,&#8221;sourceHref&#8221;:&#8221;&#8221;,&#8221;cvss&#8221;:{&#8220;score&#8221;:6.5,&#8221;severity&#8221;:&#8221;MEDIUM&#8221;,&#8221;vector&#8221;:&#8221;CVSS:3.1\/AV:A\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:H&#8221;,&#8221;version&#8221;:&#8221;3.1&#8243;},&#8221;cvss2&#8243;:{},&#8221;cvss3&#8243;:{&#8220;version&#8221;:&#8221;&#8221;,&#8221;vectorString&#8221;:&#8221;&#8221;,&#8221;baseScore&#8221;:0,&#8221;baseSeverity&#8221;:&#8221;&#8221;,&#8221;attackVector&#8221;:&#8221;&#8221;,&#8221;attackComplexity&#8221;:&#8221;&#8221;,&#8221;privilegesRequired&#8221;:&#8221;&#8221;,&#8221;userInteraction&#8221;:&#8221;&#8221;,&#8221;scope&#8221;:&#8221;&#8221;,&#8221;confidentialityImpact&#8221;:&#8221;&#8221;,&#8221;integrityImpact&#8221;:&#8221;&#8221;,&#8221;availabilityImpact&#8221;:&#8221;&#8221;,&#8221;cvssV3&#8243;:{&#8220;version&#8221;:&#8221;&#8221;,&#8221;vectorString&#8221;:&#8221;&#8221;,&#8221;baseScore&#8221;:0,&#8221;baseSeverity&#8221;:&#8221;&#8221;,&#8221;attackVector&#8221;:&#8221;&#8221;,&#8221;attackComplexity&#8221;:&#8221;&#8221;,&#8221;privilegesRequired&#8221;:&#8221;&#8221;,&#8221;userInteraction&#8221;:&#8221;&#8221;,&#8221;scope&#8221;:&#8221;&#8221;,&#8221;confidentialityImpact&#8221;:&#8221;&#8221;,&#8221;integrityImpact&#8221;:&#8221;&#8221;,&#8221;availabilityImpact&#8221;:&#8221;&#8221;}},&#8221;href&#8221;:&#8221;&#8221;,&#8221;category_name&#8221;:&#8221;CVE&#8221;,&#8221;post_link&#8221;:&#8221;&#8221;,&#8221;product&#8221;:&#8221;Snapdragon&#8221;,&#8221;version&#8221;:&#8221;AR8035&#8243;,&#8221;vendor&#8221;:&#8221;Qualcomm, Inc.&#8221;,&#8221;ai_description&#8221;:&#8221;&#8221;,&#8221;ai_severity&#8221;:&#8221;&#8221;,&#8221;ai_vendor&#8221;:&#8221;&#8221;,&#8221;ai_product&#8221;:&#8221;&#8221;,&#8221;ai_version&#8221;:&#8221;&#8221;,&#8221;ai_score&#8221;:0}<\/p>\n","protected":false},"excerpt":{"rendered":"<p>{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Transient DOS when processing target power rate tables during channel configuration.&#8221;,&#8221;published&#8221;:&#8221;2026-05-04T16:43:07.614Z&#8221;,&#8221;modified&#8221;:&#8221;2026-05-04T16:43:07.614Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Buffer Over-read in WLAN HAL&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/may-2026-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-47401&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-126&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc. Snapdragon AR8035\\nQualcomm, Inc. Snapdragon Cologne\\nQualcomm, Inc. Snapdragon CQ7790\\nQualcomm, Inc&#8230;.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,26,12,21,13,7,11,5],"class_list":["post-51255","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-65","tag-exploit","tag-medium","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Buffer Over-read in WLAN HAL_CVE-2025-47401 - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=51255\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Buffer Over-read in WLAN HAL_CVE-2025-47401 - zero redgem\" \/>\n<meta property=\"og:description\" content=\"{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Transient DOS when processing target power rate tables during channel configuration.&#8221;,&#8221;published&#8221;:&#8221;2026-05-04T16:43:07.614Z&#8221;,&#8221;modified&#8221;:&#8221;2026-05-04T16:43:07.614Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Buffer Over-read in WLAN HAL&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/may-2026-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-47401&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-126&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc. Snapdragon AR8035nQualcomm, Inc. Snapdragon ColognenQualcomm, Inc. Snapdragon CQ7790nQualcomm, Inc....\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=51255\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-04T12:09:40+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51255#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51255\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"Buffer Over-read in WLAN HAL_CVE-2025-47401\",\"datePublished\":\"2026-05-04T12:09:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51255\"},\"wordCount\":1330,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"CVSS-6.5\",\"exploit\",\"MEDIUM\",\"news\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_cve\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=51255#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51255\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51255\",\"name\":\"Buffer Over-read in WLAN HAL_CVE-2025-47401 - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2026-05-04T12:09:40+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51255#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=51255\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51255#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Buffer Over-read in WLAN HAL_CVE-2025-47401\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Buffer Over-read in WLAN HAL_CVE-2025-47401 - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=51255","og_locale":"en_US","og_type":"article","og_title":"Buffer Over-read in WLAN HAL_CVE-2025-47401 - zero redgem","og_description":"{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Transient DOS when processing target power rate tables during channel configuration.&#8221;,&#8221;published&#8221;:&#8221;2026-05-04T16:43:07.614Z&#8221;,&#8221;modified&#8221;:&#8221;2026-05-04T16:43:07.614Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Buffer Over-read in WLAN HAL&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/may-2026-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-47401&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-126&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc. Snapdragon AR8035nQualcomm, Inc. Snapdragon ColognenQualcomm, Inc. Snapdragon CQ7790nQualcomm, Inc....","og_url":"https:\/\/zero.redgem.net\/?p=51255","og_site_name":"zero redgem","article_published_time":"2026-05-04T12:09:40+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=51255#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=51255"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"Buffer Over-read in WLAN HAL_CVE-2025-47401","datePublished":"2026-05-04T12:09:40+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=51255"},"wordCount":1330,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","CVSS-6.5","exploit","MEDIUM","news","Security","tapic","Vulnerability"],"articleSection":["category_cve"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=51255#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=51255","url":"https:\/\/zero.redgem.net\/?p=51255","name":"Buffer Over-read in WLAN HAL_CVE-2025-47401 - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2026-05-04T12:09:40+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=51255#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=51255"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=51255#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"Buffer Over-read in WLAN HAL_CVE-2025-47401"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/51255","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=51255"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/51255\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=51255"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=51255"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=51255"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}