Vulnerability-Lookup

CVE-2025-47400 (GCVE-0-2025-47400)

Vulnerability from cvelistv5 – Published: 2026-04-06 15:33 – Updated: 2026-04-07 03:55

Title

Buffer Over-read in Computer Vision

Summary

Cryptographic issue while copying data to a destination buffer without validating its size.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-06 00:00 UTC

CWE

CWE-126 - Buffer Over-read

Assigner

qualcomm mitre root

References

1 reference

URL	Tags
https://docs.qualcomm.com/product/publicresources…

Impacted products

1 product

Vendor	Product	Version	CPE status
Qualcomm, Inc.	Snapdragon	Affected: Pandeiro Affected: Snapdragon 8 Elite Gen 5 Affected: SW6100 Affected: SW6100P Affected: Themisto Affected: WCD9395 Affected: WCN7860 Affected: WCN7861 Affected: WSA8840 Affected: WSA8845 Affected: WSA8845H	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-47400",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-06T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-07T03:55:46.892Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Snapdragon Compute",
            "Snapdragon Wearables"
          ],
          "product": "Snapdragon",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Pandeiro"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8 Elite Gen 5"
            },
            {
              "status": "affected",
              "version": "SW6100"
            },
            {
              "status": "affected",
              "version": "SW6100P"
            },
            {
              "status": "affected",
              "version": "Themisto"
            },
            {
              "status": "affected",
              "version": "WCD9395"
            },
            {
              "status": "affected",
              "version": "WCN7860"
            },
            {
              "status": "affected",
              "version": "WCN7861"
            },
            {
              "status": "affected",
              "version": "WSA8840"
            },
            {
              "status": "affected",
              "version": "WSA8845"
            },
            {
              "status": "affected",
              "version": "WSA8845H"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Cryptographic issue while copying data to a destination buffer without validating its size."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-126",
              "description": "CWE-126 Buffer Over-read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-06T15:33:44.933Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"
        }
      ],
      "title": "Buffer Over-read in Computer Vision"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2025-47400",
    "datePublished": "2026-04-06T15:33:44.933Z",
    "dateReserved": "2025-05-06T08:33:16.276Z",
    "dateUpdated": "2026-04-07T03:55:46.892Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-47400",
      "date": "2026-09-23",
      "epss": "0.00095",
      "percentile": "0.00715"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Snapdragon Compute",
                  "Snapdragon Wearables"
                ],
                "product": "Snapdragon",
                "vendor": "Qualcomm, Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "Pandeiro"
                  },
                  {
                    "status": "affected",
                    "version": "Snapdragon 8 Elite Gen 5"
                  },
                  {
                    "status": "affected",
                    "version": "SW6100"
                  },
                  {
                    "status": "affected",
                    "version": "SW6100P"
                  },
                  {
                    "status": "affected",
                    "version": "Themisto"
                  },
                  {
                    "status": "affected",
                    "version": "WCD9395"
                  },
                  {
                    "status": "affected",
                    "version": "WCN7860"
                  },
                  {
                    "status": "affected",
                    "version": "WCN7861"
                  },
                  {
                    "status": "affected",
                    "version": "WSA8840"
                  },
                  {
                    "status": "affected",
                    "version": "WSA8845"
                  },
                  {
                    "status": "affected",
                    "version": "WSA8845H"
                  }
                ]
              }
            ],
            "source": "product-security@qualcomm.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "23F8EF0C-BB48-47E1-A045-254D79388F75",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "058950FC-ED72-4E91-AE13-87E738ADC083",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "41070BDB-15E4-4DD7-A132-A14AA24978E5",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:snapdragon_8_elite_gen_5:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "102460A6-9637-4883-9230-2CC888D5D74E",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:sw6100_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7561D3AA-6719-4D64-9545-C89B070A3E46",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:sw6100:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "673D9178-9F53-4A79-9BC2-1529A00AF995",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:sw6100p_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D8A59464-5093-4F7B-9E38-7021BAD35CF9",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:sw6100p:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8D1950E8-092C-4622-ABDD-311E7762BDE2",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:themisto_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "55DE7B27-56A2-4046-9E03-8215587C8827",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:themisto:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0853EA22-4EFD-4037-8B83-CB7C18417D23",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "699056F6-1517-4F25-AE07-4FFCF6923B9F",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E4C023D2-6FF5-4FFC-B9F2-895979166580",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2EB8794F-7998-424E-AF68-E4A4F9310F65",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "799D69CE-3FCC-4B19-8B00-9AF38111D983",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "57608D47-894C-4895-B4B3-4733D55D57DB",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2FFD2C38-1A61-4BED-ABFA-DAE0C4B78620",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CA33DE15-C177-43B3-AD50-FF797753D12E",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AE1A5841-5BCB-4033-ACB9-23F3FCA65309",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5B47BF35-3AA0-4667-842E-19B0FE30BF3C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8A071672-9405-4418-9141-35CEADBB65AF",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BB7CF473-8B25-4851-91F2-1BD693CCDC85",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "91E591F2-8F72-4A5A-9264-2742EB2DABDA",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Cryptographic issue while copying data to a destination buffer without validating its size."
          }
        ],
        "id": "CVE-2025-47400",
        "lastModified": "2026-06-17T09:28:02.230",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.2,
              "source": "product-security@qualcomm.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2025-47400",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-06T00:00:00+00:00",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-04-06T16:16:28.590",
        "references": [
          {
            "source": "product-security@qualcomm.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"
          }
        ],
        "sourceIdentifier": "product-security@qualcomm.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-126"
              }
            ],
            "source": "product-security@qualcomm.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-04-07T17:04:18+00:00",
      "cve": "CVE-2025-47400",
      "id": "CVE-2025-47400",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Buffer Over-read in Computer Vision",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-47400.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-47400",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-06T16:11:51.398488Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-06T16:21:43.446Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Snapdragon Compute",
                "Snapdragon Wearables"
              ],
              "product": "Snapdragon",
              "vendor": "Qualcomm, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "Pandeiro"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 8 Elite Gen 5"
                },
                {
                  "status": "affected",
                  "version": "SW6100"
                },
                {
                  "status": "affected",
                  "version": "SW6100P"
                },
                {
                  "status": "affected",
                  "version": "Themisto"
                },
                {
                  "status": "affected",
                  "version": "WCD9395"
                },
                {
                  "status": "affected",
                  "version": "WCN7860"
                },
                {
                  "status": "affected",
                  "version": "WCN7861"
                },
                {
                  "status": "affected",
                  "version": "WSA8840"
                },
                {
                  "status": "affected",
                  "version": "WSA8845"
                },
                {
                  "status": "affected",
                  "version": "WSA8845H"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Cryptographic issue while copying data to a destination buffer without validating its size."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-126",
                  "description": "CWE-126 Buffer Over-read",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-06T15:33:44.933Z",
            "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
            "shortName": "qualcomm"
          },
          "references": [
            {
              "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"
            }
          ],
          "title": "Buffer Over-read in Computer Vision"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "assignerShortName": "qualcomm",
        "cveId": "CVE-2025-47400",
        "datePublished": "2026-04-06T15:33:44.933Z",
        "dateReserved": "2025-05-06T08:33:16.276Z",
        "dateUpdated": "2026-04-07T03:55:46.892Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

BDU:2026-05024 (CVE-2025-47400)

Vulnerability from fstec – Published: 2026-04-13 – Updated: 2026-04-13 – View on bdu.fstec.ru Fixed

Title

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Summary

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Severity

6.2 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:C/A:N

7.1 (High) CVSS 3.1


                      
                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-126 - Чтение из памяти, следующей за границей окончания буфера

Aliases

CVE-2025-47400

References

1 reference

URL
https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-b…

Impacted products

11 products from 1 vendor

Vendors

Qualcomm Technologies Inc.

Products

WCN7860, WCN7861, WCD9395, WSA8840, WSA8845, WSA8845H, Pandeiro, Snapdragon 8 Elite Gen 5, SW6100, SW6100P, Themisto

Versions

- (WCN7860), - (WCN7861), - (WCD9395), - (WSA8840), - (WSA8845), - (WSA8845H), - (Pandeiro), - (Snapdragon 8 Elite Gen 5), - (SW6100), - (SW6100P), - (Themisto)

Product types

Микропрограммный код аппаратных компонентов компьютера, Firmware

Mitigations

Использование рекомендаций производителя: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:N",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Qualcomm Technologies Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (WCN7860), - (WCN7861), - (WCD9395), - (WSA8840), - (WSA8845), - (WSA8845H), - (Pandeiro), - (Snapdragon 8 Elite Gen 5), - (SW6100), - (SW6100P), - (Themisto)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "05.01.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "13.04.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.04.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-05024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-47400",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "WCN7860, WCN7861, WCD9395, WSA8840, WSA8845, WSA8845H, Pandeiro, Snapdragon 8 Elite Gen 5, SW6100, SW6100P, Themisto",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u043b\u0430\u0442 Qualcomm, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0427\u0442\u0435\u043d\u0438\u0435 \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438, \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0435\u0439 \u043e\u043a\u043e\u043d\u0447\u0430\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 (CWE-126)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u043b\u0430\u0442 Qualcomm \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-126",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,2)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,1)"
}

CERTFR-2026-AVI-0679

Vulnerability from certfr_avis - Published: 2026-06-02 - Updated: 2026-06-02

De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.

Google indique que la vulnérabilité CVE-2025-48595 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Google	Android	Android versions antérieures à 14, 15, 16, 16-qpr2 et Filet avant le correctif du 1er juin 2026

References

Title

Publication Time

Tags

Bulletin de sécurité Google Android

2026-06-01

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Android versions ant\u00e9rieures \u00e0 14, 15, 16, 16-qpr2 et Filet avant le correctif du 1er juin 2026",
      "product": {
        "name": "Android",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-0075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0075"
    },
    {
      "name": "CVE-2025-47384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47384"
    },
    {
      "name": "CVE-2026-0046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0046"
    },
    {
      "name": "CVE-2026-20449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20449"
    },
    {
      "name": "CVE-2026-22167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22167"
    },
    {
      "name": "CVE-2026-0100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0100"
    },
    {
      "name": "CVE-2026-0042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0042"
    },
    {
      "name": "CVE-2026-21372",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21372"
    },
    {
      "name": "CVE-2026-0087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0087"
    },
    {
      "name": "CVE-2026-21546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21546"
    },
    {
      "name": "CVE-2026-28574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28574"
    },
    {
      "name": "CVE-2026-0052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0052"
    },
    {
      "name": "CVE-2026-21378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21378"
    },
    {
      "name": "CVE-2025-71254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71254"
    },
    {
      "name": "CVE-2026-0091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0091"
    },
    {
      "name": "CVE-2025-48595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48595"
    },
    {
      "name": "CVE-2026-0088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0088"
    },
    {
      "name": "CVE-2026-21374",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21374"
    },
    {
      "name": "CVE-2026-0016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0016"
    },
    {
      "name": "CVE-2026-0078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0078"
    },
    {
      "name": "CVE-2026-0048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0048"
    },
    {
      "name": "CVE-2025-59606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59606"
    },
    {
      "name": "CVE-2026-21736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21736"
    },
    {
      "name": "CVE-2026-28581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28581"
    },
    {
      "name": "CVE-2026-0044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0044"
    },
    {
      "name": "CVE-2025-47401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47401"
    },
    {
      "name": "CVE-2026-0051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0051"
    },
    {
      "name": "CVE-2026-21547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21547"
    },
    {
      "name": "CVE-2025-26418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-26418"
    },
    {
      "name": "CVE-2026-21544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21544"
    },
    {
      "name": "CVE-2026-0050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0050"
    },
    {
      "name": "CVE-2026-0096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0096"
    },
    {
      "name": "CVE-2026-0055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0055"
    },
    {
      "name": "CVE-2026-0086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0086"
    },
    {
      "name": "CVE-2026-0061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0061"
    },
    {
      "name": "CVE-2026-0043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0043"
    },
    {
      "name": "CVE-2026-20431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20431"
    },
    {
      "name": "CVE-2026-21373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21373"
    },
    {
      "name": "CVE-2025-48570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48570"
    },
    {
      "name": "CVE-2026-20433",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20433"
    },
    {
      "name": "CVE-2026-0056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0056"
    },
    {
      "name": "CVE-2026-0095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0095"
    },
    {
      "name": "CVE-2026-21541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21541"
    },
    {
      "name": "CVE-2026-20432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20432"
    },
    {
      "name": "CVE-2026-0076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0076"
    },
    {
      "name": "CVE-2025-47400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47400"
    },
    {
      "name": "CVE-2025-48600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48600"
    },
    {
      "name": "CVE-2026-0009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0009"
    },
    {
      "name": "CVE-2026-0070",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0070"
    },
    {
      "name": "CVE-2026-0039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0039"
    },
    {
      "name": "CVE-2026-21542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21542"
    },
    {
      "name": "CVE-2026-28586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28586"
    },
    {
      "name": "CVE-2026-21353",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21353"
    },
    {
      "name": "CVE-2026-0036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0036"
    },
    {
      "name": "CVE-2026-0069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0069"
    },
    {
      "name": "CVE-2025-48649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48649"
    },
    {
      "name": "CVE-2026-21545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21545"
    },
    {
      "name": "CVE-2026-0059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0059"
    },
    {
      "name": "CVE-2025-71255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71255"
    },
    {
      "name": "CVE-2025-64505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64505"
    },
    {
      "name": "CVE-2026-28577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28577"
    },
    {
      "name": "CVE-2025-48648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48648"
    },
    {
      "name": "CVE-2026-0077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0077"
    },
    {
      "name": "CVE-2025-48612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48612"
    },
    {
      "name": "CVE-2026-0060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0060"
    },
    {
      "name": "CVE-2025-71256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71256"
    },
    {
      "name": "CVE-2026-21367",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21367"
    },
    {
      "name": "CVE-2025-71253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71253"
    },
    {
      "name": "CVE-2026-0079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0079"
    },
    {
      "name": "CVE-2026-0099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0099"
    },
    {
      "name": "CVE-2025-64720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64720"
    },
    {
      "name": "CVE-2026-21538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21538"
    },
    {
      "name": "CVE-2026-28580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28580"
    },
    {
      "name": "CVE-2026-28578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28578"
    },
    {
      "name": "CVE-2025-48652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48652"
    },
    {
      "name": "CVE-2026-24089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24089"
    },
    {
      "name": "CVE-2025-65018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-65018"
    },
    {
      "name": "CVE-2026-21376",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21376"
    },
    {
      "name": "CVE-2026-21540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21540"
    },
    {
      "name": "CVE-2026-20455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20455"
    },
    {
      "name": "CVE-2026-20448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20448"
    },
    {
      "name": "CVE-2026-0074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0074"
    },
    {
      "name": "CVE-2025-48581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48581"
    },
    {
      "name": "CVE-2025-22426",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22426"
    },
    {
      "name": "CVE-2026-21375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21375"
    },
    {
      "name": "CVE-2025-40214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40214"
    },
    {
      "name": "CVE-2026-21352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21352"
    },
    {
      "name": "CVE-2026-21543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21543"
    },
    {
      "name": "CVE-2026-0093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0093"
    },
    {
      "name": "CVE-2026-21381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21381"
    },
    {
      "name": "CVE-2025-71252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71252"
    },
    {
      "name": "CVE-2026-20435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20435"
    },
    {
      "name": "CVE-2025-32348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32348"
    },
    {
      "name": "CVE-2025-48616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48616"
    },
    {
      "name": "CVE-2025-47392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47392"
    },
    {
      "name": "CVE-2026-20447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20447"
    },
    {
      "name": "CVE-2026-25277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25277"
    },
    {
      "name": "CVE-2026-0094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0094"
    },
    {
      "name": "CVE-2026-22163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22163"
    },
    {
      "name": "CVE-2026-25276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25276"
    },
    {
      "name": "CVE-2026-0045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0045"
    },
    {
      "name": "CVE-2026-20454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20454"
    },
    {
      "name": "CVE-2026-0067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0067"
    },
    {
      "name": "CVE-2025-48615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48615"
    },
    {
      "name": "CVE-2026-21539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21539"
    },
    {
      "name": "CVE-2026-0085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0085"
    },
    {
      "name": "CVE-2026-0097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0097"
    },
    {
      "name": "CVE-2026-0089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0089"
    },
    {
      "name": "CVE-2025-71251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71251"
    },
    {
      "name": "CVE-2025-59604",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59604"
    },
    {
      "name": "CVE-2025-59605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59605"
    },
    {
      "name": "CVE-2026-0018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0018"
    },
    {
      "name": "CVE-2025-47403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47403"
    },
    {
      "name": "CVE-2026-0098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0098"
    },
    {
      "name": "CVE-2026-21380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21380"
    },
    {
      "name": "CVE-2026-0080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0080"
    },
    {
      "name": "CVE-2026-20450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20450"
    },
    {
      "name": "CVE-2026-0041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0041"
    },
    {
      "name": "CVE-2026-0040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0040"
    },
    {
      "name": "CVE-2026-24085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24085"
    },
    {
      "name": "CVE-2026-20453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20453"
    },
    {
      "name": "CVE-2025-22424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22424"
    }
  ],
  "initial_release_date": "2026-06-02T00:00:00",
  "last_revision_date": "2026-06-02T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0679",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-06-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Android. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n\nGoogle indique que la vuln\u00e9rabilit\u00e9 CVE-2025-48595 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android",
  "vendor_advisories": [
    {
      "published_at": "2026-06-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Google Android",
      "url": "https://source.android.com/docs/security/bulletin/2026/2026-06-01?hl=fr"
    }
  ]
}

FKIE_CVE-2025-47400

Vulnerability from fkie_nvd - Published: 2026-04-06 16:16 - Updated: 2026-06-17 09:28

Severity

7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Summary

Cryptographic issue while copying data to a destination buffer without validating its size.

References

	URL	Tags
	product-security@qualcomm.com	https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html	Vendor Advisory

Impacted products

Vendor	Product	Version
qualcomm	pandeiro_firmware	-
qualcomm	pandeiro	-
qualcomm	snapdragon_8_elite_gen_5_firmware	-
qualcomm	snapdragon_8_elite_gen_5	-
qualcomm	sw6100_firmware	-
qualcomm	sw6100	-
qualcomm	sw6100p_firmware	-
qualcomm	sw6100p	-
qualcomm	themisto_firmware	-
qualcomm	themisto	-
qualcomm	wcd9395_firmware	-
qualcomm	wcd9395	-
qualcomm	wcn7860_firmware	-
qualcomm	wcn7860	-
qualcomm	wcn7861_firmware	-
qualcomm	wcn7861	-
qualcomm	wsa8840_firmware	-
qualcomm	wsa8840	-
qualcomm	wsa8845_firmware	-
qualcomm	wsa8845	-
qualcomm	wsa8845h_firmware	-
qualcomm	wsa8845h	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Snapdragon Compute",
            "Snapdragon Wearables"
          ],
          "product": "Snapdragon",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Pandeiro"
            },
            {
              "status": "affected",
              "version": "Snapdragon 8 Elite Gen 5"
            },
            {
              "status": "affected",
              "version": "SW6100"
            },
            {
              "status": "affected",
              "version": "SW6100P"
            },
            {
              "status": "affected",
              "version": "Themisto"
            },
            {
              "status": "affected",
              "version": "WCD9395"
            },
            {
              "status": "affected",
              "version": "WCN7860"
            },
            {
              "status": "affected",
              "version": "WCN7861"
            },
            {
              "status": "affected",
              "version": "WSA8840"
            },
            {
              "status": "affected",
              "version": "WSA8845"
            },
            {
              "status": "affected",
              "version": "WSA8845H"
            }
          ]
        }
      ],
      "source": "product-security@qualcomm.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "23F8EF0C-BB48-47E1-A045-254D79388F75",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "058950FC-ED72-4E91-AE13-87E738ADC083",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "41070BDB-15E4-4DD7-A132-A14AA24978E5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:snapdragon_8_elite_gen_5:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "102460A6-9637-4883-9230-2CC888D5D74E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sw6100_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7561D3AA-6719-4D64-9545-C89B070A3E46",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sw6100:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "673D9178-9F53-4A79-9BC2-1529A00AF995",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sw6100p_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8A59464-5093-4F7B-9E38-7021BAD35CF9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sw6100p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8D1950E8-092C-4622-ABDD-311E7762BDE2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:themisto_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "55DE7B27-56A2-4046-9E03-8215587C8827",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:themisto:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0853EA22-4EFD-4037-8B83-CB7C18417D23",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "699056F6-1517-4F25-AE07-4FFCF6923B9F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4C023D2-6FF5-4FFC-B9F2-895979166580",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2EB8794F-7998-424E-AF68-E4A4F9310F65",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "799D69CE-3FCC-4B19-8B00-9AF38111D983",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "57608D47-894C-4895-B4B3-4733D55D57DB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FFD2C38-1A61-4BED-ABFA-DAE0C4B78620",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA33DE15-C177-43B3-AD50-FF797753D12E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE1A5841-5BCB-4033-ACB9-23F3FCA65309",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B47BF35-3AA0-4667-842E-19B0FE30BF3C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A071672-9405-4418-9141-35CEADBB65AF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB7CF473-8B25-4851-91F2-1BD693CCDC85",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "91E591F2-8F72-4A5A-9264-2742EB2DABDA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cryptographic issue while copying data to a destination buffer without validating its size."
    }
  ],
  "id": "CVE-2025-47400",
  "lastModified": "2026-06-17T09:28:02.230",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.2,
        "source": "product-security@qualcomm.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-47400",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-04-06T00:00:00+00:00",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-04-06T16:16:28.590",
  "references": [
    {
      "source": "product-security@qualcomm.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"
    }
  ],
  "sourceIdentifier": "product-security@qualcomm.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-126"
        }
      ],
      "source": "product-security@qualcomm.com",
      "type": "Secondary"
    }
  ]
}

GHSA-M6MR-P6RR-QVH3

Vulnerability from github – Published: 2026-04-06 18:33 – Updated: 2026-04-06 18:33

Details

Cryptographic issue while copying data to a destination buffer without validating its size.

Severity

7.1 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-47400"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-126"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-04-06T16:16:28Z",
    "severity": "HIGH"
  },
  "details": "Cryptographic issue while copying data to a destination buffer without validating its size.",
  "id": "GHSA-m6mr-p6rr-qvh3",
  "modified": "2026-04-06T18:33:05Z",
  "published": "2026-04-06T18:33:05Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47400"
    },
    {
      "type": "WEB",
      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2026-0173

Vulnerability from csaf_ncscnl - Published: 2026-06-02 08:00 - Updated: 2026-06-02 08:00

Summary

Kwetsbaarheden verholpen in Google Android en Samsung Mobile

Scope

77 vulnerabilities in this advisory, including CVE-2025-47400.

CVE-2025-47400

A cryptographic vulnerability occurs when data is copied to a destination buffer without verifying the buffer's size, potentially causing security issues such as buffer overflows.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Known affected: 2 products

Open the full advisory

WID-SEC-W-2026-1772

Vulnerability from csaf_certbund - Published: 2026-06-01 22:00 - Updated: 2026-06-01 22:00

Summary

Google Android: Mehrere Schwachstellen

Severity

Kritisch

Scope

122 vulnerabilities in this advisory, including CVE-2025-47400.

CVE-2025-47400

Known affected: 1 product

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2025-47400 (GCVE-0-2025-47400)

BDU:2026-05024 (CVE-2025-47400)

CERTFR-2026-AVI-0679

Solutions

FKIE_CVE-2025-47400

GHSA-M6MR-P6RR-QVH3

NCSC-2026-0173

WID-SEC-W-2026-1772

Tags

Sightings

Nomenclature

Related by attack behaviour