{"id":"CVE-2025-47401","title":"Transient DOS when processing target power rate tables during channel configuration.","summary":"Transient DOS when processing target power rate tables during channel configuration.","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-126","CWE-125"],"vendor":"qualcomm","product":"fastconnect_6200_firmware","affected":["fastconnect_6200_firmware","fastconnect_6700_firmware","fastconnect_6900_firmware","fastconnect_7800_firmware","flight_rb5_5g_firmware","fwa_gen_3_ultra_firmware","g2_gen_1_firmware","g3x_gen_2_firmware","immersive_home_3210_firmware","immersive_home_326_firmware","ipq5300_firmware","ipq5302_firmware","ipq5312_firmware","ipq5332_firmware","ipq9008_firmware","ipq9554_firmware","ipq9570_firmware","ipq9574_firmware","iqx5121_firmware","iqx7181_firmware","lemans_au_lgit_firmware","lemansau_firmware","marina_firmware","milos_firmware","milos_iot_firmware","molokai_firmware","monaco_iot_firmware","netrani_firmware","networking_pro_1200_firmware","networking_pro_1210_firmware","networking_pro_1610_firmware","networking_pro_610_firmware","networking_pro_810_firmware","orne_firmware","palawan25_firmware","pandeiro_firmware","qam8255p_firmware","qam8295p_firmware","qam8397p_firmware","qamsrv1h_firmware","sm8650q_firmware","sm8735p_firmware","sm8750p_firmware","sm8845p_firmware","snapdragon_4_gen_2_mobile_firmware","snapdragon_6_gen_1_mobile_firmware","snapdragon_6_gen_3_mobile_firmware","snapdragon_6_gen_4_mobile_firmware","snapdragon_7_gen_1_mobile_firmware","snapdragon_7_gen_4_mobile_firmware","snapdragon_7+_gen_2_mobile_firmware","snapdragon_7s_gen_3_mobile_firmware","snapdragon_8_elite_firmware","snapdragon_8_elite_gen_5_firmware","snapdragon_8_gen_1_mobile_firmware","snapdragon_8_gen_2_mobile_firmware","snapdragon_8_gen_3_mobile_firmware","snapdragon_8+_gen_1_mobile_firmware","snapdragon_8+_gen_2_mobile_firmware","snapdragon_888_5g_mobile_firmware","snapdragon_888+_5g_mobile_firmware","snapdragon_8cx_gen_3_compute_firmware","snapdragon_ar1_gen_1_firmware","snapdragon_ar1+_gen_1_firmware","snapdragon_auto_5g_modem-rf_firmware","snapdragon_auto_5g_modem-rf_gen_2_firmware","snapdragon_x32_5g_modem-rf_firmware","snapdragon_x35_5g_modem-rf_firmware","snapdragon_x62_5g_modem-rf_firmware","snapdragon_x65_5g_modem-rf_firmware","snapdragon_x72_5g_modem-rf_firmware","snapdragon_x75_5g_modem-rf_firmware","srv1h_firmware","srv1m_firmware","sxr2230p_firmware","sxr2250p_firmware","sxr2330p_firmware","sxr2350p_firmware","wcd9340_firmware","wcd9370_firmware","ar8035_firmware","cologne_firmware","cq7790_firmware","cq8725s_firmware","cq8750m_firmware","qamsrv1m_firmware","qca0000_firmware","qca2062_firmware","qca2064_firmware","qca2065_firmware","qca2066_firmware","qca6174a_firmware","qca6391_firmware","qca6554a_firmware","qca6564au_firmware","qca6574_firmware","qca6574a_firmware","qca6574au_firmware","qca6584au_firmware","qca6595_firmware"],"published":"2026-05-04","updated":"2026-09-30","sourceUpdated":"2026-09-30T22:10:00.273","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-47401","references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html","label":"product-security@qualcomm.com"}],"tags":["nvd"],"epss":0.00216,"epssPercentile":0.10833,"ingestedAt":"2026-09-30T22:27:27.775Z","slug":"CVE-2025-47401","body":"## Overview\n\nTransient DOS when processing target power rate tables during channel configuration.\n\n## Affected\n\n- `fastconnect_6200_firmware`\n- `fastconnect_6700_firmware`\n- `fastconnect_6900_firmware`\n- `fastconnect_7800_firmware`\n- `flight_rb5_5g_firmware`\n- `fwa_gen_3_ultra_firmware`\n- `g2_gen_1_firmware`\n- `g3x_gen_2_firmware`\n- `immersive_home_3210_firmware`\n- `immersive_home_326_firmware`\n- `ipq5300_firmware`\n- `ipq5302_firmware`\n- `ipq5312_firmware`\n- `ipq5332_firmware`\n- `ipq9008_firmware`\n- `ipq9554_firmware`\n- `ipq9570_firmware`\n- `ipq9574_firmware`\n- `iqx5121_firmware`\n- `iqx7181_firmware`\n- `lemans_au_lgit_firmware`\n- `lemansau_firmware`\n- `marina_firmware`\n- `milos_firmware`\n- `milos_iot_firmware`\n- `molokai_firmware`\n- `monaco_iot_firmware`\n- `netrani_firmware`\n- `networking_pro_1200_firmware`\n- `networking_pro_1210_firmware`\n- `networking_pro_1610_firmware`\n- `networking_pro_610_firmware`\n- `networking_pro_810_firmware`\n- `orne_firmware`\n- `palawan25_firmware`\n- `pandeiro_firmware`\n- `qam8255p_firmware`\n- `qam8295p_firmware`\n- `qam8397p_firmware`\n- `qamsrv1h_firmware`\n- `sm8650q_firmware`\n- `sm8735p_firmware`\n- `sm8750p_firmware`\n- `sm8845p_firmware`\n- `snapdragon_4_gen_2_mobile_firmware`\n- `snapdragon_6_gen_1_mobile_firmware`\n- `snapdragon_6_gen_3_mobile_firmware`\n- `snapdragon_6_gen_4_mobile_firmware`\n- `snapdragon_7_gen_1_mobile_firmware`\n- `snapdragon_7_gen_4_mobile_firmware`\n- `snapdragon_7+_gen_2_mobile_firmware`\n- `snapdragon_7s_gen_3_mobile_firmware`\n- `snapdragon_8_elite_firmware`\n- `snapdragon_8_elite_gen_5_firmware`\n- `snapdragon_8_gen_1_mobile_firmware`\n- `snapdragon_8_gen_2_mobile_firmware`\n- `snapdragon_8_gen_3_mobile_firmware`\n- `snapdragon_8+_gen_1_mobile_firmware`\n- `snapdragon_8+_gen_2_mobile_firmware`\n- `snapdragon_888_5g_mobile_firmware`\n- `snapdragon_888+_5g_mobile_firmware`\n- `snapdragon_8cx_gen_3_compute_firmware`\n- `snapdragon_ar1_gen_1_firmware`\n- `snapdragon_ar1+_gen_1_firmware`\n- `snapdragon_auto_5g_modem-rf_firmware`\n- `snapdragon_auto_5g_modem-rf_gen_2_firmware`\n- `snapdragon_x32_5g_modem-rf_firmware`\n- `snapdragon_x35_5g_modem-rf_firmware`\n- `snapdragon_x62_5g_modem-rf_firmware`\n- `snapdragon_x65_5g_modem-rf_firmware`\n- `snapdragon_x72_5g_modem-rf_firmware`\n- `snapdragon_x75_5g_modem-rf_firmware`\n- `srv1h_firmware`\n- `srv1m_firmware`\n- `sxr2230p_firmware`\n- `sxr2250p_firmware`\n- `sxr2330p_firmware`\n- `sxr2350p_firmware`\n- `wcd9340_firmware`\n- `wcd9370_firmware`\n- `ar8035_firmware`\n- `cologne_firmware`\n- `cq7790_firmware`\n- `cq8725s_firmware`\n- `cq8750m_firmware`\n- `qamsrv1m_firmware`\n- `qca0000_firmware`\n- `qca2062_firmware`\n- `qca2064_firmware`\n- `qca2065_firmware`\n- `qca2066_firmware`\n- `qca6174a_firmware`\n- `qca6391_firmware`\n- `qca6554a_firmware`\n- `qca6564au_firmware`\n- `qca6574_firmware`\n- `qca6574a_firmware`\n- `qca6574au_firmware`\n- `qca6584au_firmware`\n- `qca6595_firmware`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}