PatchSiren cyber security CVE debrief
CVE-2025-47403 Qualcomm, Inc. CVE debrief
Transient DOS occurs when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming, impacting Qualcomm Snapdragon devices. This vulnerability requires defenders to assess exposure and verify wireless roaming configurations to prevent potential DOS attacks. The CVE Program record and NVD vulnerability detail provide information on the vulnerability. Defenders of wireless networks should review configurations and monitor network traffic for unusual patterns.
- Vendor
- Qualcomm, Inc.
- Product
- Snapdragon
- CVSS
- MEDIUM 6.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-05-04
- Original CVE updated
- 2026-09-30
- Advisory published
- 2026-05-04
- Advisory updated
- 2026-09-30
Who should care
Defenders of wireless networks and Qualcomm Snapdragon devices should assess exposure to transient DOS attacks and verify wireless roaming configurations.
Why it matters
CVE-2025-47403 causes a Transient DOS in Qualcomm Snapdragon devices during wireless roaming, requiring defenders to assess exposure and verify configurations.
- Verify wireless roaming configurations to prevent malformed Fast Transition response frames
- Monitor network traffic for unusual patterns that may indicate DOS attacks
- Update incident response plans to address potential DOS attacks
- Assess exposure of Qualcomm Snapdragon devices to transient DOS attacks
Technical summary
The vulnerability causes a Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming in Qualcomm Snapdragon devices. This requires defenders to assess exposure and verify wireless roaming configurations. The technical impact is a potential DOS attack, which can be mitigated by reviewing and updating incident response plans.
Defensive priority
Medium
Recommended defensive actions
- Assess exposure of Qualcomm Snapdragon devices to transient DOS attacks
- Verify wireless roaming configurations for malformed Fast Transition response frames
- Implement network monitoring for unusual traffic patterns
- Review and update incident response plans for potential DOS attacks
Evidence notes
The CVE Program record and NVD vulnerability detail provide information on the vulnerability, which causes a Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
Sources and references
Verified primary and authoritative sources
-
CVE-2025-47403 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2025-47403
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2025-47403 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2025-47403
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
Source reference
Unverified legacy reference
URL: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html
[email protected] - Vendor Advisory
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.