CVE-2025-47408: Untrusted Pointer Dereference in Power Optimization Firmware
Published May 4, 2026
·Updated
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
Affected Software
40 affected components
All of the following
Qualcomm Fastconnect 6200 Firmware
Qualcomm Fastconnect 6200
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Iqx5121 Firmware
Qualcomm Iqx5121
All of the following
Qualcomm Iqx7181 Firmware
Qualcomm Iqx7181
All of the following
Qualcomm Qca0000 Firmware
Qualcomm Qca0000
All of the following
Qualcomm Sc8380xp Firmware
Qualcomm Sc8380xp
All of the following
Qualcomm Sd865 5g Firmware
Qualcomm Sd865 5g
All of the following
Qualcomm Sm6250 Firmware
Qualcomm Sm6250
All of the following
Qualcomm Snapdragon 7c Compute Firmware
Qualcomm Snapdragon 7c Compute
All of the following
Qualcomm Snapdragon 7c Gen 2 Compute Firmware
Qualcomm Snapdragon 7c Gen 2 Compute
All of the following
Qualcomm Snapdragon Xr2 5g Firmware
Qualcomm Snapdragon Xr2 5g
All of the following
Qualcomm Snapdragon Xr2\+ Gen 1 Firmware
Qualcomm Snapdragon Xr2\+ Gen 1
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Event History
May 4, 2026
CVE Published
via MITRE·04:43 PM
Data Sourced
via MITRE·04:43 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-47408?
CVE-2025-47408 has a medium severity rating due to its potential for memory corruption.
2
How do I fix CVE-2025-47408?
To fix CVE-2025-47408, ensure to update the firmware of affected Qualcomm devices to the latest version provided by the vendor.
3
What products are affected by CVE-2025-47408?
CVE-2025-47408 affects various Qualcomm Fastconnect and Snapdragon firmware versions.
4
What kind of vulnerability is CVE-2025-47408?
CVE-2025-47408 is characterized as an untrusted pointer dereference vulnerability.
5
Can CVE-2025-47408 be exploited remotely?
Exploitation of CVE-2025-47408 may occur through untrusted drivers sending IOCTL calls with invalid buffers.