CVE Feed

    Dashboard / CVE / CVE-2025-47395

    CVE-2025-47395

    Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.

    Published:Jan 6, 2026
    Last Modified:Jan 27, 2026
    EPS:Jan 6, 2026
    EPSS Score:0.00024
    CVSS Score:6.5

    Affected Products

    Vendor
    Qualcomm
    Product
    Snapdragon
    Vendor
    Qualcomm
    Product
    Wcn7861
    Vendor
    Qualcomm
    Product
    Wcn7861 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-126 Buffer Over-read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-25292 (CVSS 7.6) — Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework con…
    CVE-2026-25289 (CVSS 9.6) — Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frame…
    CVE-2026-25288 (CVSS 7.4) — Transient DOS when processing a short target wake time channel usage response frame with insufficient packet s…
    CVE-2026-24084 (CVSS 7.5) — Weak configuration when UE does not verify the consistency of its additional security capabilities with the re…
    CVE-2026-24083 (CVSS 7.8) — Memory Corruption while processing IOCTL device driver requests with invalid arguments.…
    CVE-2026-24080 (CVSS 7.8) — Memory Corruption when handling malformed request parameters in the fingerprint TA.…
    CVE-2026-24079 (CVSS 8.1) — Cryptographic Issue while processing registration requests with malformed or missing authentication parameters…
    CVE-2026-24078 (CVSS 6.5) — Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signali…
    CVE-2026-24077 (CVSS 6.5) — Information Disclosure when processing wireless network channel switch information with improperly formatted l…
    CVE-2026-24076 (CVSS 6.7) — Memory Corruption when processing registry values with incorrect types using a direct query method.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High