CVE-2025-47408

Untrusted Pointer Dereference in Power Optimization Firmware

State: Published
Severity: 7.8 High
Published: May 4, 2026
Updated: May 5, 2026
Reserved: May 6, 2025

Description

Memory corruption when another driver calls an IOCTL with invalid input/output buffer.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-822 Untrusted Pointer Dereference

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	FastConnect 6200Affected FastConnect 6900Affected FastConnect 7800Affected IQX5121Affected IQX7181Affected QCA0000Affected SC8380XPAffected SD865 5GAffected SM6250Affected Snapdragon 7c Compute PlatformAffected Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"Affected Snapdragon XR2 5G PlatformAffected Snapdragon XR2+ Gen 1 PlatformAffected WCD9380Affected WCD9385Affected WSA8810Affected WSA8815Affected WSA8840Affected WSA8845Affected WSA8845HAffected

Product

Versions

SnapdragonQualcomm, Inc.

FastConnect 6200Affected
FastConnect 6900Affected
FastConnect 7800Affected
IQX5121Affected
IQX7181Affected
QCA0000Affected
SC8380XPAffected
SD865 5GAffected
SM6250Affected
Snapdragon 7c Compute PlatformAffected
Snapdragon 7c Gen 2 Compute Platform "Rennell Pro"Affected
Snapdragon XR2 5G PlatformAffected
Snapdragon XR2+ Gen 1 PlatformAffected
WCD9380Affected
WCD9385Affected
WSA8810Affected
WSA8815Affected
WSA8840Affected
WSA8845Affected
WSA8845HAffected

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.