PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-47391 Qualcomm, Inc. CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-04-06T16:16:27.950Z and has not been modified since then. The NVD entry is currently Analyzed. This HIGH severity vulnerability (CVSS Score of 7.8) involves memory corruption while processing a frame request from a user, affecting multiple Qualcomm chipsets and devices, including WCN, WSA, and FastConnect products. A patch is available in the April 2026 Qualcomm security bulletin. Qualcomm device operators, administrators, and security teams should assess exposure and apply the patch. System and network defenders should monitor for anomalies and verify system integrity. The CVE-

Vendor
Qualcomm, Inc.
Product
Snapdragon
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-06
Original CVE updated
2026-09-30
Advisory published
2026-04-06
Advisory updated
2026-09-30

Who should care

Qualcomm device operators, administrators, and security teams should assess exposure and apply the patch. System and network defenders should monitor for anomalies and verify system integrity.

Why it matters

CVE-2025-47391 is a HIGH severity vulnerability requiring patching and exposure assessment. Defenders should prioritize patching, system integrity verification, and monitoring.

  • Patching is required to prevent potential memory corruption
  • Exposure assessment and inventory management are necessary
  • System integrity verification and monitoring are recommended
  • Compensating controls may be needed until patching is complete

Technical summary

CVE-2025-47391 is a HIGH severity vulnerability (CVSS Score of 7.8) caused by memory corruption while processing a frame request from a user. Multiple Qualcomm chipsets and devices are affected, including WCN, WSA, and FastConnect products. A patch is available in the April 2026 Qualcomm security bulletin.

Defensive priority

Qualcomm device operators and administrators should prioritize reviewing and applying the provided patch, assessing exposure, and verifying system integrity.

Recommended defensive actions

  • Review and apply the Qualcomm patch (April 2026 bulletin)
  • Assess system exposure and prioritize patching
  • Verify system integrity and monitor for anomalies
  • Inventory Qualcomm devices for patching

Evidence notes

The CVE record and NVD entry provide details on the memory corruption vulnerability, but do not specify versions, exploitation, or impact. A Qualcomm security bulletin (April 2026) is referenced, which likely contains patch details.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-47391 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-47391

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-47391 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-47391

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html

    [email protected] - Patch, Vendor Advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.