PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-47407 Qualcomm, Inc. CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-05-04T17:16:21.097Z and has not been modified since then. The NVD entry is currently Analyzed. This high-severity memory corruption vulnerability in Qualcomm digital signal processors can lead to system instability, elevation of privileges, or data compromise. Defenders should prioritize patching affected devices to prevent potential exploitation. The vulnerability occurs due to allocation failure at the kernel level while creating a process, impacting confidentiality, integrity, and availability. Affected products include various Qualcomm chipsets and platforms. Qualcomm's CSAM

Vendor
Qualcomm, Inc.
Product
Snapdragon
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-04
Original CVE updated
2026-09-30
Advisory published
2026-05-04
Advisory updated
2026-09-30

Who should care

Qualcomm product security teams, administrators, and users of devices with affected Qualcomm chipsets and platforms should assess exposure and apply patches.

Why it matters

CVE-2025-47407 is a high-severity memory corruption vulnerability in Qualcomm digital signal processors. Defenders should prioritize patching affected devices to prevent potential system instability, elevation of privileges, or data compromise.

  • Memory corruption can lead to system crashes or instability
  • Potential elevation of privileges or unauthorized access
  • Data integrity and confidentiality may be compromised
  • Patching is required to prevent potential exploitation

Technical summary

CVE-2025-47407 is a memory corruption vulnerability in the Qualcomm digital signal processor. The vulnerability occurs due to allocation failure at the kernel level while creating a process. This can lead to high impact on confidentiality, integrity, and availability.

Defensive priority

Qualcomm product security teams and administrators should prioritize assessing exposure and applying patches for affected devices.

Recommended defensive actions

  • Assess exposure of Qualcomm-based devices to CVE-2025-47407
  • Apply patches from Qualcomm for affected devices
  • Inventory Qualcomm chipsets and platforms for vulnerability
  • Verify device configurations for potential workarounds

Evidence notes

The CVE description indicates memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level. The CVSS score is 7.8 with a High severity. Affected products include various Qualcomm chipsets and platforms.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-47407 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-47407

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-47407 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-47407

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html

    [email protected] - Patch, Vendor Advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.