CVE-2025-47403Medium· 6.5▾ SunlitTransient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
snapdragon_x65_5g_modem-rf_firmwaresnapdragon_x72_5g_modem-rf_firmwaresnapdragon_x75_5g_modem-rf_firmwaresrv1h_firmwaresrv1m_firmwaresxr2230p_firmwaresxr2250p_firmwaresxr2330p_firmwaresxr2350p_firmwaretrestles_firmwarewcd9340_firmwarewcd9370_firmwarewcd9371_firmwarewcd9375_firmwarewcd9378_firmwarewcd9378c_firmwarewcd9380_firmwarewcd9385_firmwarewcd9390_firmwarewcd9395_firmwarewcn3950_firmwarewcn3988_firmwarewcn6450_firmwarewcn6650_firmwarewcn6755_firmwarewcn7760_firmwarewcn7860_firmwarewcn7861_firmwarewcn7880_firmwarewcn7881_firmwarewsa8810_firmwarewsa8815_firmwarewsa8830_firmwarewsa8832_firmwarewsa8835_firmwarewsa8840_firmwarewsa8845_firmwarewsa8845h_firmwarewsa8850_firmwarewsa8850w_firmwarear8035_firmwarecologne_firmwarecq7790_firmwarecq8725s_firmwarecq8750m_firmwarecsr8811_firmwarefastconnect_6200_firmwarefastconnect_6700_firmwarefastconnect_6900_firmwarefastconnect_7800_firmwarefwa_gen_3_ultra_firmwarefwa_gen_5_elite_firmwareg2_gen_1_firmwareg3x_gen_2_firmwareimmersive_home_214_firmwareimmersive_home_216_firmwareimmersive_home_316_firmwareimmersive_home_318_firmwareimmersive_home_3210_firmwareimmersive_home_326_firmwareipq5010_firmwareipq5028_firmwareipq5300_firmwareipq5302_firmwareipq5312_firmwareipq5332_firmwareipq6000_firmwareipq6010_firmwareipq6018_firmwareipq8076_firmwareipq8078_firmwareipq9008_firmwareipq9554_firmwareipq9570_firmwareipq9574_firmwareiqx5121_firmwareiqx7181_firmwarekobuk_firmwarelemans_au_lgit_firmwarelemansau_firmwaremarina_firmwaremilos_firmwaremilos_iot_firmwaremolokai_firmwarenetrani_firmwareqca8084_firmwareqca8085_firmwareqca8337_firmwareqca8386_firmwareqca8695au_firmwareqca9888_firmwareqca9889_firmwareqcc2073_firmwareqcc2076_firmwareqcc710_firmwareqcf8000_firmwareqcf8001_firmwareqcm4490_firmwareqcm5430_firmwareqcm6490_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-47406Medium· 6.1Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.
CVE-2025-47401Medium· 6.5Transient DOS when processing target power rate tables during channel configuration.
CVE-2025-47408High· 7.8Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
CVE-2025-47407High· 7.8Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
CVE-2025-47405High· 7.8Memory corruption when processing camera sensor input/output control codes with invalid output buffers.
CVE-2025-47404Medium· 6.5Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.