PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-47392 Qualcomm, Inc. CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-04-06T16:16:28.223Z and has not been modified since then. The NVD entry is currently Analyzed. This vulnerability affects Qualcomm devices, potentially leading to memory corruption when decoding corrupted satellite data files with invalid signature offsets. Qualcomm device operators, security teams, and administrators should review satellite data file processing for affected devices and assess exposure.

Vendor
Qualcomm, Inc.
Product
Snapdragon
CVSS
HIGH 8.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-06
Original CVE updated
2026-09-30
Advisory published
2026-04-06
Advisory updated
2026-09-30

Who should care

Qualcomm device operators, security teams, and administrators should prioritize reviewing satellite data file processing for affected devices and assess exposure. This includes verifying affected device versions and configurations, assessing exposure based on device usage, applying vendor-provided remediation, and monitoring for suspicious activity. Security teams must focus on validating affected scope, reviewing官方c

Why it matters

Qualcomm device operators and security teams should prioritize reviewing satellite data file processing for affected devices and assess exposure.

  • Verify affected device versions and configurations
  • Assess exposure based on device usage
  • Apply vendor-provided remediation
  • Monitor for suspicious activity

Technical summary

Memory corruption vulnerability in Qualcomm satellite data file processing due to improper handling of corrupted files with invalid signature offsets. Affected devices require verification and potential remediation. Official CVE Program record and NIST NVD detail page provide vulnerability metadata. This issue necessitates reviewing satellite data file processing for affected Qualcomm devices, assessing exposure based on device usage and configuration, verifying device versions, and applying vendor-provided remediation.

Defensive priority

Qualcomm device operators and security teams should prioritize reviewing satellite data file processing for affected devices and assess exposure.

Recommended defensive actions

  • Review satellite data file processing for affected Qualcomm devices
  • Assess exposure based on device usage and configuration
  • Verify device versions and apply vendor remediation
  • Monitor for suspicious satellite data file activity

Evidence notes

Memory corruption when decoding corrupted satellite data files with invalid signature offsets. Official CVE Program record and NIST NVD detail page provide vulnerability metadata.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-47392 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-47392

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-47392 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-47392

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html

    [email protected] - Vendor Advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.