Cyber Posture

CVE-2025-47391

High

Published: 06 April 2026

Published
06 April 2026
Modified
08 April 2026
KEV Added
Patch
CVSS Score 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0001 0.4th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-47391 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Qualcomm Wcn3988 Firmware. Its CVSS base score is 7.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 0.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploitation for Privilege Escalation (T1068). What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly remediates the memory corruption flaw by identifying, patching, and applying vendor-provided updates for the affected Qualcomm components.

prevent

Implements memory protection safeguards like address space layout randomization and data execution prevention to mitigate stack-based buffer overflow exploitation.

prevent

Validates user-supplied frame requests to ensure they are within acceptable bounds, preventing the malformed inputs that trigger the buffer overflow.

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Why these techniques?

Local stack-based buffer overflow in Qualcomm component directly enables privilege escalation via crafted frame request from low-priv user context.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

Memory corruption while processing a frame request from user.

Deeper analysisAI

CVE-2025-47391 is a memory corruption vulnerability, classified under CWE-121 (stack-based buffer overflow), that occurs while processing a frame request from a user. It affects components in Qualcomm products, as detailed in the vendor's security bulletin. The vulnerability received a CVSS v3.1 base score of 7.8 (High), reflecting local vector (AV:L), low attack complexity (AC:L), low privileges required (PR:L), no user interaction (UI:N), unchanged scope (S:U), and high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H). It was published on April 6, 2026.

A local attacker with low privileges can exploit this vulnerability by sending a specially crafted frame request to the affected component, triggering memory corruption. Successful exploitation could allow the attacker to gain high-level impacts, including unauthorized disclosure of sensitive information, modification of data, and denial of service, potentially compromising the system's security.

Qualcomm's April 2026 security bulletin provides details on mitigation, including available patches and recommended updates for affected products. Security practitioners should consult the advisory at https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin.html for specific remediation steps and verification guidance.

Details

CWE(s)

Affected Products

qualcomm
wcn3988 firmware
all versions
qualcomm
wcn6450 firmware
all versions
qualcomm
wcn6650 firmware
all versions
qualcomm
wcn6755 firmware
all versions
qualcomm
wcn7860 firmware
all versions
qualcomm
wcn7861 firmware
all versions
qualcomm
wcn7880 firmware
all versions
qualcomm
wcn7881 firmware
all versions
qualcomm
wsa8810 firmware
all versions
qualcomm
wsa8815 firmware
all versions
+91 more product configuration(s) — see NVD for full list

CVEs Like This One

CVE-2025-47373Same product: Qualcomm Fastconnect 6200
CVE-2025-47397Same product: Qualcomm Fastconnect 6200
CVE-2025-47398Same product: Qualcomm Fastconnect 6200
CVE-2025-59600Same product: Qualcomm Fastconnect 6200
CVE-2025-47385Same product: Qualcomm Fastconnect 6200
CVE-2024-49833Same product: Qualcomm Fastconnect 6700
CVE-2025-47389Same product: Qualcomm Fastconnect 6200
CVE-2026-21385Same product: Qualcomm Fastconnect 6200
CVE-2025-47377Same product: Qualcomm Fastconnect 6200
CVE-2025-47345Same product: Qualcomm Fastconnect 6200

References