{"id":51256,"date":"2026-05-04T12:09:44","date_gmt":"2026-05-04T12:09:44","guid":{"rendered":"https:\/\/zero.redgem.net\/?p=51256"},"modified":"2026-05-04T12:09:44","modified_gmt":"2026-05-04T12:09:44","slug":"buffer-over-read-in-wlan-firmware","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=51256","title":{"rendered":"Buffer Over-read in WLAN Firmware_CVE-2025-47403"},"content":{"rendered":"<p>{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.&#8221;,&#8221;published&#8221;:&#8221;2026-05-04T16:43:08.911Z&#8221;,&#8221;modified&#8221;:&#8221;2026-05-04T16:43:08.911Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Buffer Over-read in WLAN Firmware&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/may-2026-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-47403&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-126&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc. Snapdragon AR8035\\nQualcomm, Inc. Snapdragon Cologne\\nQualcomm, Inc. Snapdragon CQ7790\\nQualcomm, Inc. Snapdragon CQ8725S\\nQualcomm, Inc. Snapdragon CQ8750M\\nQualcomm, Inc. Snapdragon CSR8811\\nQualcomm, Inc. Snapdragon FastConnect 6200\\nQualcomm, Inc. Snapdragon FastConnect 6700\\nQualcomm, Inc. Snapdragon FastConnect 6900\\nQualcomm, Inc. Snapdragon FastConnect 7800\\nQualcomm, Inc. Snapdragon FWA Gen 3 Ultra Platform\\nQualcomm, Inc. Snapdragon FWA Gen 5 Elite Platform\\nQualcomm, Inc. Snapdragon G2 Gen 1\\nQualcomm, Inc. Snapdragon G3x Gen 2\\nQualcomm, Inc. Snapdragon Immersive Home 214 Platform\\nQualcomm, Inc. Snapdragon Immersive Home 216 Platform\\nQualcomm, Inc. Snapdragon Immersive Home 316 Platform\\nQualcomm, Inc. Snapdragon Immersive Home 318 Platform\\nQualcomm, Inc. Snapdragon Immersive Home 3210 Platform\\nQualcomm, Inc. Snapdragon Immersive Home 326 Platform\\nQualcomm, Inc. Snapdragon IPQ5010\\nQualcomm, Inc. Snapdragon IPQ5028\\nQualcomm, Inc. Snapdragon IPQ5300\\nQualcomm, Inc. Snapdragon IPQ5302\\nQualcomm, Inc. Snapdragon IPQ5312\\nQualcomm, Inc. Snapdragon IPQ5332\\nQualcomm, Inc. Snapdragon IPQ6000\\nQualcomm, Inc. Snapdragon IPQ6010\\nQualcomm, Inc. Snapdragon IPQ6018\\nQualcomm, Inc. Snapdragon IPQ8076\\nQualcomm, Inc. Snapdragon IPQ8078\\nQualcomm, Inc. Snapdragon IPQ9008\\nQualcomm, Inc. Snapdragon IPQ9554\\nQualcomm, Inc. Snapdragon IPQ9570\\nQualcomm, Inc. Snapdragon IPQ9574\\nQualcomm, Inc. Snapdragon IQX5121\\nQualcomm, Inc. Snapdragon IQX7181\\nQualcomm, Inc. Snapdragon Kobuk\\nQualcomm, Inc. Snapdragon LeMans_AU_LGIT\\nQualcomm, Inc. Snapdragon LeMansAU\\nQualcomm, Inc. Snapdragon Marina\\nQualcomm, Inc. Snapdragon Milos\\nQualcomm, Inc. Snapdragon Milos_IOT\\nQualcomm, Inc. Snapdragon Molokai\\nQualcomm, Inc. Snapdragon Netrani\\nQualcomm, Inc. Snapdragon Networking Pro 1200 Platform\\nQualcomm, Inc. Snapdragon Networking Pro 1210 Platform\\nQualcomm, Inc. Snapdragon Networking Pro 1610 Platform\\nQualcomm, Inc. Snapdragon Networking Pro 400 Platform\\nQualcomm, Inc. Snapdragon Networking Pro 600 Platform\\nQualcomm, Inc. Snapdragon Networking Pro 610 Platform\\nQualcomm, Inc. Snapdragon Networking Pro 800 Platform\\nQualcomm, Inc. Snapdragon Networking Pro 810 Platform\\nQualcomm, Inc. Snapdragon NPro A8 Elite Platform\\nQualcomm, Inc. Snapdragon Orne\\nQualcomm, Inc. Snapdragon Palawan25\\nQualcomm, Inc. Snapdragon Pandeiro\\nQualcomm, Inc. Snapdragon QAM8255P\\nQualcomm, Inc. Snapdragon QAM8397P\\nQualcomm, Inc. Snapdragon QAMSRV1H\\nQualcomm, Inc. Snapdragon QAMSRV1M\\nQualcomm, Inc. Snapdragon QCA0000\\nQualcomm, Inc. Snapdragon QCA4024\\nQualcomm, Inc. Snapdragon QCA6174A\\nQualcomm, Inc. Snapdragon QCA6391\\nQualcomm, Inc. Snapdragon QCA6554A\\nQualcomm, Inc. Snapdragon QCA6564AU\\nQualcomm, Inc. Snapdragon QCA6574\\nQualcomm, Inc. Snapdragon QCA6574A\\nQualcomm, Inc. Snapdragon QCA6574AU\\nQualcomm, Inc. Snapdragon QCA6584AU\\nQualcomm, Inc. Snapdragon QCA6595\\nQualcomm, Inc. Snapdragon QCA6595AU\\nQualcomm, Inc. Snapdragon QCA6678AQ\\nQualcomm, Inc. Snapdragon QCA6688AQ\\nQualcomm, Inc. Snapdragon QCA6696\\nQualcomm, Inc. Snapdragon QCA6698AQ\\nQualcomm, Inc. Snapdragon QCA6777AQ\\nQualcomm, Inc. Snapdragon QCA6787AQ\\nQualcomm, Inc. Snapdragon QCA6797AQ\\nQualcomm, Inc. Snapdragon QCA8072\\nQualcomm, Inc. Snapdragon QCA8075\\nQualcomm, Inc. Snapdragon QCA8080\\nQualcomm, Inc. Snapdragon QCA8081\\nQualcomm, Inc. Snapdragon QCA8082\\nQualcomm, Inc. Snapdragon QCA8084\\nQualcomm, Inc. Snapdragon QCA8085\\nQualcomm, Inc. Snapdragon QCA8337\\nQualcomm, Inc. Snapdragon QCA8386\\nQualcomm, Inc. Snapdragon QCA8695AU\\nQualcomm, Inc. Snapdragon QCA9888\\nQualcomm, Inc. Snapdragon QCA9889\\nQualcomm, Inc. Snapdragon QCC2073\\nQualcomm, Inc. Snapdragon QCC2076\\nQualcomm, Inc. Snapdragon QCC710\\nQualcomm, Inc. Snapdragon QCF8000\\nQualcomm, Inc. Snapdragon QCF8001\\nQualcomm, Inc. Snapdragon QCM4490\\nQualcomm, Inc. Snapdragon QCM5430\\nQualcomm, Inc. Snapdragon QCM6490\\nQualcomm, Inc. Snapdragon QCN5022\\nQualcomm, Inc. Snapdragon QCN5024\\nQualcomm, Inc. Snapdragon QCN5052\\nQualcomm, Inc. Snapdragon QCN5054\\nQualcomm, Inc. Snapdragon QCN5122\\nQualcomm, Inc. Snapdragon QCN5124\\nQualcomm, Inc. Snapdragon QCN5152\\nQualcomm, Inc. Snapdragon QCN5154\\nQualcomm, Inc. Snapdragon QCN5164\\nQualcomm, Inc. Snapdragon QCN6023\\nQualcomm, Inc. Snapdragon QCN6024\\nQualcomm, Inc. Snapdragon QCN6122\\nQualcomm, Inc. Snapdragon QCN6132\\nQualcomm, Inc. Snapdragon QCN6224\\nQualcomm, Inc. Snapdragon QCN6274\\nQualcomm, Inc. Snapdragon QCN6402\\nQualcomm, Inc. Snapdragon QCN6412\\nQualcomm, Inc. Snapdragon QCN6422\\nQualcomm, Inc. Snapdragon QCN6432\\nQualcomm, Inc. Snapdragon QCN9000\\nQualcomm, Inc. Snapdragon QCN9001\\nQualcomm, Inc. Snapdragon QCN9002\\nQualcomm, Inc. Snapdragon QCN9003\\nQualcomm, Inc. Snapdragon QCN9011\\nQualcomm, Inc. Snapdragon QCN9012\\nQualcomm, Inc. Snapdragon QCN9022\\nQualcomm, Inc. Snapdragon QCN9024\\nQualcomm, Inc. Snapdragon QCN9070\\nQualcomm, Inc. Snapdragon QCN9100\\nQualcomm, Inc. Snapdragon QCN9274\\nQualcomm, Inc. Snapdragon QCS4490\\nQualcomm, Inc. Snapdragon QCS6690\\nQualcomm, Inc. Snapdragon QCS8550\\nQualcomm, Inc. Snapdragon QFW7114\\nQualcomm, Inc. Snapdragon QFW7124\\nQualcomm, Inc. Snapdragon QLN1083BD\\nQualcomm, Inc. Snapdragon QLN1086BD\\nQualcomm, Inc. Snapdragon QMB415\\nQualcomm, Inc. Snapdragon QMB715\\nQualcomm, Inc. Snapdragon QMP1000\\nQualcomm, Inc. Snapdragon QMP2001\\nQualcomm, Inc. Snapdragon QPA1083BD\\nQualcomm, Inc. Snapdragon QPA1086BD\\nQualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC3 Platform\\nQualcomm, Inc. Snapdragon QXM1083\\nQualcomm, Inc. Snapdragon QXM1086\\nQualcomm, Inc. Snapdragon QXM1093\\nQualcomm, Inc. Snapdragon QXM1094\\nQualcomm, Inc. Snapdragon QXM1095\\nQualcomm, Inc. Snapdragon QXM1096\\nQualcomm, Inc. Snapdragon SA7255P\\nQualcomm, Inc. Snapdragon SA7775P\\nQualcomm, Inc. Snapdragon SA8255P\\nQualcomm, Inc. Snapdragon SA8620P\\nQualcomm, Inc. Snapdragon SA8770P\\nQualcomm, Inc. Snapdragon SA9000P\\nQualcomm, Inc. Snapdragon SAR1165P\\nQualcomm, Inc. Snapdragon SAR2130P\\nQualcomm, Inc. Snapdragon SC8380XP\\nQualcomm, Inc. Snapdragon SD 8 Gen1 5G\\nQualcomm, Inc. Snapdragon SDX61\\nQualcomm, Inc. Snapdragon SDX65M\\nQualcomm, Inc. Snapdragon SDX81\\nQualcomm, Inc. Snapdragon SM6450P\\nQualcomm, Inc. Snapdragon SM6475P\\nQualcomm, Inc. Snapdragon SM6475Q\\nQualcomm, Inc. Snapdragon SM6650P\\nQualcomm, Inc. Snapdragon SM6850\\nQualcomm, Inc. Snapdragon SM7425\\nQualcomm, Inc. Snapdragon SM7435\\nQualcomm, Inc. Snapdragon SM7435P\\nQualcomm, Inc. Snapdragon SM7525\\nQualcomm, Inc. Snapdragon SM7550\\nQualcomm, Inc. Snapdragon SM7550P\\nQualcomm, Inc. Snapdragon SM7635P\\nQualcomm, Inc. Snapdragon SM7675\\nQualcomm, Inc. Snapdragon SM7675P\\nQualcomm, Inc. Snapdragon SM8425\\nQualcomm, Inc. Snapdragon SM8475P\\nQualcomm, Inc. Snapdragon SM8550P\\nQualcomm, Inc. Snapdragon SM8635\\nQualcomm, Inc. Snapdragon SM8635P\\nQualcomm, Inc. Snapdragon SM8650Q\\nQualcomm, Inc. Snapdragon SM8735P\\nQualcomm, Inc. Snapdragon SM8750P\\nQualcomm, Inc. Snapdragon SM8845P\\nQualcomm, Inc. Snapdragon Snapdragon 4 Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 3 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 6 Gen 4 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 7 Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 7 Gen 4 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 7+ Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 7s Gen 3 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8 Elite\\nQualcomm, Inc. Snapdragon Snapdragon 8 Elite Gen 5\\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 3 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8+ Gen 1 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon 8+ Gen 2 Mobile Platform\\nQualcomm, Inc. Snapdragon Snapdragon AR1 Gen 1 Platform\\nQualcomm, Inc. Snapdragon Snapdragon AR1+ Gen 1 Platform\\nQualcomm, Inc. Snapdragon Snapdragon Auto 5G Modem-RF Gen 2\\nQualcomm, Inc. Snapdragon Snapdragon X62 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon X65 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon X72 5G Modem-RF System\\nQualcomm, Inc. Snapdragon Snapdragon X75 5G Modem-RF System\\nQualcomm, Inc. Snapdragon SRV1H\\nQualcomm, Inc. Snapdragon SRV1M\\nQualcomm, Inc. Snapdragon SXR2230P\\nQualcomm, Inc. Snapdragon SXR2250P\\nQualcomm, Inc. Snapdragon SXR2330P\\nQualcomm, Inc. Snapdragon SXR2350P\\nQualcomm, Inc. Snapdragon Trestles\\nQualcomm, Inc. Snapdragon WCD9340\\nQualcomm, Inc. Snapdragon WCD9370\\nQualcomm, Inc. Snapdragon WCD9371\\nQualcomm, Inc. Snapdragon WCD9375\\nQualcomm, Inc. Snapdragon WCD9378\\nQualcomm, Inc. Snapdragon WCD9378C\\nQualcomm, Inc. Snapdragon WCD9380\\nQualcomm, Inc. Snapdragon WCD9385\\nQualcomm, Inc. Snapdragon WCD9390\\nQualcomm, Inc. Snapdragon WCD9395\\nQualcomm, Inc. Snapdragon WCN3950\\nQualcomm, Inc. Snapdragon WCN3988\\nQualcomm, Inc. Snapdragon WCN6450\\nQualcomm, Inc. Snapdragon WCN6650\\nQualcomm, Inc. Snapdragon WCN6755\\nQualcomm, Inc. Snapdragon WCN7760\\nQualcomm, Inc. Snapdragon WCN7860\\nQualcomm, Inc. Snapdragon WCN7861\\nQualcomm, Inc. Snapdragon WCN7880\\nQualcomm, Inc. Snapdragon WCN7881\\nQualcomm, Inc. Snapdragon WSA8810\\nQualcomm, Inc. Snapdragon WSA8815\\nQualcomm, Inc. Snapdragon WSA8830\\nQualcomm, Inc. Snapdragon WSA8832\\nQualcomm, Inc. Snapdragon WSA8835\\nQualcomm, Inc. Snapdragon WSA8840\\nQualcomm, Inc. Snapdragon WSA8845\\nQualcomm, Inc. Snapdragon WSA8845H\\nQualcomm, Inc. Snapdragon WSA8850\\nQualcomm, Inc. Snapdragon WSA8850W\\nQualcomm, Inc. Snapdragon WSA8855C\\nQualcomm, Inc. Snapdragon X1E80100\\nQualcomm, Inc. Snapdragon X2000077\\nQualcomm, Inc. Snapdragon X2000086\\nQualcomm, Inc. Snapdragon X2000090\\nQualcomm, Inc. Snapdragon X2000092\\nQualcomm, Inc. Snapdragon X2000094\\nQualcomm, Inc. Snapdragon XG101002\\nQualcomm, Inc. Snapdragon XG101032\\nQualcomm, Inc. Snapdragon XG101039\\nQualcomm, Inc. Snapdragon XRV7209\\nQualcomm, Inc. Snapdragon XRV9209&#8243;,&#8221;sourceHref&#8221;:&#8221;&#8221;,&#8221;cvss&#8221;:{&#8220;score&#8221;:6.5,&#8221;severity&#8221;:&#8221;MEDIUM&#8221;,&#8221;vector&#8221;:&#8221;CVSS:3.1\/AV:A\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:H&#8221;,&#8221;version&#8221;:&#8221;3.1&#8243;},&#8221;cvss2&#8243;:{},&#8221;cvss3&#8243;:{&#8220;version&#8221;:&#8221;&#8221;,&#8221;vectorString&#8221;:&#8221;&#8221;,&#8221;baseScore&#8221;:0,&#8221;baseSeverity&#8221;:&#8221;&#8221;,&#8221;attackVector&#8221;:&#8221;&#8221;,&#8221;attackComplexity&#8221;:&#8221;&#8221;,&#8221;privilegesRequired&#8221;:&#8221;&#8221;,&#8221;userInteraction&#8221;:&#8221;&#8221;,&#8221;scope&#8221;:&#8221;&#8221;,&#8221;confidentialityImpact&#8221;:&#8221;&#8221;,&#8221;integrityImpact&#8221;:&#8221;&#8221;,&#8221;availabilityImpact&#8221;:&#8221;&#8221;,&#8221;cvssV3&#8243;:{&#8220;version&#8221;:&#8221;&#8221;,&#8221;vectorString&#8221;:&#8221;&#8221;,&#8221;baseScore&#8221;:0,&#8221;baseSeverity&#8221;:&#8221;&#8221;,&#8221;attackVector&#8221;:&#8221;&#8221;,&#8221;attackComplexity&#8221;:&#8221;&#8221;,&#8221;privilegesRequired&#8221;:&#8221;&#8221;,&#8221;userInteraction&#8221;:&#8221;&#8221;,&#8221;scope&#8221;:&#8221;&#8221;,&#8221;confidentialityImpact&#8221;:&#8221;&#8221;,&#8221;integrityImpact&#8221;:&#8221;&#8221;,&#8221;availabilityImpact&#8221;:&#8221;&#8221;}},&#8221;href&#8221;:&#8221;&#8221;,&#8221;category_name&#8221;:&#8221;CVE&#8221;,&#8221;post_link&#8221;:&#8221;&#8221;,&#8221;product&#8221;:&#8221;Snapdragon&#8221;,&#8221;version&#8221;:&#8221;AR8035&#8243;,&#8221;vendor&#8221;:&#8221;Qualcomm, Inc.&#8221;,&#8221;ai_description&#8221;:&#8221;&#8221;,&#8221;ai_severity&#8221;:&#8221;&#8221;,&#8221;ai_vendor&#8221;:&#8221;&#8221;,&#8221;ai_product&#8221;:&#8221;&#8221;,&#8221;ai_version&#8221;:&#8221;&#8221;,&#8221;ai_score&#8221;:0}<\/p>\n","protected":false},"excerpt":{"rendered":"<p>{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.&#8221;,&#8221;published&#8221;:&#8221;2026-05-04T16:43:08.911Z&#8221;,&#8221;modified&#8221;:&#8221;2026-05-04T16:43:08.911Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Buffer Over-read in WLAN Firmware&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/may-2026-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-47403&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-126&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc. Snapdragon AR8035\\nQualcomm,&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,26,12,21,13,7,11,5],"class_list":["post-51256","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-65","tag-exploit","tag-medium","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Buffer Over-read in WLAN Firmware_CVE-2025-47403 - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=51256\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Buffer Over-read in WLAN Firmware_CVE-2025-47403 - zero redgem\" \/>\n<meta property=\"og:description\" content=\"{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.&#8221;,&#8221;published&#8221;:&#8221;2026-05-04T16:43:08.911Z&#8221;,&#8221;modified&#8221;:&#8221;2026-05-04T16:43:08.911Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Buffer Over-read in WLAN Firmware&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/may-2026-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-47403&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-126&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc. Snapdragon AR8035nQualcomm,...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=51256\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-04T12:09:44+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51256#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51256\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"Buffer Over-read in WLAN Firmware_CVE-2025-47403\",\"datePublished\":\"2026-05-04T12:09:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51256\"},\"wordCount\":1349,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"CVSS-6.5\",\"exploit\",\"MEDIUM\",\"news\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_cve\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=51256#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51256\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51256\",\"name\":\"Buffer Over-read in WLAN Firmware_CVE-2025-47403 - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2026-05-04T12:09:44+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51256#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=51256\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=51256#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Buffer Over-read in WLAN Firmware_CVE-2025-47403\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Buffer Over-read in WLAN Firmware_CVE-2025-47403 - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=51256","og_locale":"en_US","og_type":"article","og_title":"Buffer Over-read in WLAN Firmware_CVE-2025-47403 - zero redgem","og_description":"{&#8220;lastseen&#8221;:&#8221;&#8221;,&#8221;description&#8221;:&#8221;Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.&#8221;,&#8221;published&#8221;:&#8221;2026-05-04T16:43:08.911Z&#8221;,&#8221;modified&#8221;:&#8221;2026-05-04T16:43:08.911Z&#8221;,&#8221;type&#8221;:&#8221;cve&#8221;,&#8221;title&#8221;:&#8221;Buffer Over-read in WLAN Firmware&#8221;,&#8221;source&#8221;:&#8221;qualcomm&#8221;,&#8221;references&#8221;:&#8221;https:\/\/docs.qualcomm.com\/product\/publicresources\/securitybulletin\/may-2026-bulletin.html&#8221;,&#8221;id&#8221;:&#8221;CVE-2025-47403&#8243;,&#8221;bulletinFamily&#8221;:&#8221;&#8221;,&#8221;cwe&#8221;:[&#8220;CWE-126&#8243;],&#8221;cvelist&#8221;:null,&#8221;sourceData&#8221;:&#8221;Qualcomm, Inc. Snapdragon AR8035nQualcomm,...","og_url":"https:\/\/zero.redgem.net\/?p=51256","og_site_name":"zero redgem","article_published_time":"2026-05-04T12:09:44+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=51256#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=51256"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"Buffer Over-read in WLAN Firmware_CVE-2025-47403","datePublished":"2026-05-04T12:09:44+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=51256"},"wordCount":1349,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","CVSS-6.5","exploit","MEDIUM","news","Security","tapic","Vulnerability"],"articleSection":["category_cve"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=51256#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=51256","url":"https:\/\/zero.redgem.net\/?p=51256","name":"Buffer Over-read in WLAN Firmware_CVE-2025-47403 - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2026-05-04T12:09:44+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=51256#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=51256"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=51256#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"Buffer Over-read in WLAN Firmware_CVE-2025-47403"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/51256","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=51256"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/51256\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=51256"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=51256"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=51256"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}