# CVE-2025-47408

## Summary

- **CVE ID:** CVE-2025-47408
- **Severity:** HIGH
- **CVSS Score:** 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** CWE-822
- **Published:** May 4, 2026
- **Last Modified:** May 5, 2026

## Description

Memory corruption when another driver calls an IOCTL with invalid input/output buffer.

## Affected Products

- Qualcomm, Inc. — Snapdragon (FastConnect 6200)
- Qualcomm, Inc. — Snapdragon (FastConnect 6900)
- Qualcomm, Inc. — Snapdragon (FastConnect 7800)
- Qualcomm, Inc. — Snapdragon (IQX5121)
- Qualcomm, Inc. — Snapdragon (IQX7181)
- Qualcomm, Inc. — Snapdragon (QCA0000)
- Qualcomm, Inc. — Snapdragon (SC8380XP)
- Qualcomm, Inc. — Snapdragon (SD865 5G)
- Qualcomm, Inc. — Snapdragon (SM6250)
- Qualcomm, Inc. — Snapdragon (Snapdragon 7c Compute Platform)
- Qualcomm, Inc. — Snapdragon (Snapdragon 7c Gen 2 Compute Platform "Rennell Pro")
- Qualcomm, Inc. — Snapdragon (Snapdragon XR2 5G Platform)
- Qualcomm, Inc. — Snapdragon (Snapdragon XR2+ Gen 1 Platform)
- Qualcomm, Inc. — Snapdragon (WCD9380)
- Qualcomm, Inc. — Snapdragon (WCD9385)
- Qualcomm, Inc. — Snapdragon (WSA8810)
- Qualcomm, Inc. — Snapdragon (WSA8815)
- Qualcomm, Inc. — Snapdragon (WSA8840)
- Qualcomm, Inc. — Snapdragon (WSA8845)
- Qualcomm, Inc. — Snapdragon (WSA8845H)

## References

- [CNA](https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.07%
- **EPSS Percentile:** 0.1

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._