CVE-2025-47406

Published: Mag 04, 2026 Last Modified: Mag 04, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,1
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: none
Availability: low

Description

AI Translation Available

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

126

Buffer Over-read

Draft
Abstraction: Variant Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Availability Integrity
Potential Impacts:
Read Memory Bypass Protection Mechanism Dos: Crash, Exit, Or Restart
Applicable Platforms
Languages: C, C++, Memory-Unsafe
View CWE Details
https://docs.qualcomm.com/product/publicresources/securityb…
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bul…