PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-47403 Qualcomm, Inc. CVE debrief

Transient DOS occurs when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming, impacting Qualcomm Snapdragon devices. This vulnerability requires defenders to assess exposure and verify wireless roaming configurations to prevent potential DOS attacks. The CVE Program record and NVD vulnerability detail provide information on the vulnerability. Defenders of wireless networks should review configurations and monitor network traffic for unusual patterns.

Vendor
Qualcomm, Inc.
Product
Snapdragon
CVSS
MEDIUM 6.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-04
Original CVE updated
2026-09-30
Advisory published
2026-05-04
Advisory updated
2026-09-30

Who should care

Defenders of wireless networks and Qualcomm Snapdragon devices should assess exposure to transient DOS attacks and verify wireless roaming configurations.

Why it matters

CVE-2025-47403 causes a Transient DOS in Qualcomm Snapdragon devices during wireless roaming, requiring defenders to assess exposure and verify configurations.

  • Verify wireless roaming configurations to prevent malformed Fast Transition response frames
  • Monitor network traffic for unusual patterns that may indicate DOS attacks
  • Update incident response plans to address potential DOS attacks
  • Assess exposure of Qualcomm Snapdragon devices to transient DOS attacks

Technical summary

The vulnerability causes a Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming in Qualcomm Snapdragon devices. This requires defenders to assess exposure and verify wireless roaming configurations. The technical impact is a potential DOS attack, which can be mitigated by reviewing and updating incident response plans.

Defensive priority

Medium

Recommended defensive actions

  • Assess exposure of Qualcomm Snapdragon devices to transient DOS attacks
  • Verify wireless roaming configurations for malformed Fast Transition response frames
  • Implement network monitoring for unusual traffic patterns
  • Review and update incident response plans for potential DOS attacks

Evidence notes

The CVE Program record and NVD vulnerability detail provide information on the vulnerability, which causes a Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-47403 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-47403

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-47403 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-47403

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html

    [email protected] - Vendor Advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.