Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 4, 2026 · NIST NVD

   Detected

   Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

2. Oct 7, 2026 · NIST NVD

   Updated

   Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

Affected

• cpe qualcomm/wsa8835 firmwareversion unspecified
• cpe qualcomm/wsa8840 firmwareversion unspecified
• cpe qualcomm/wsa8845 firmwareversion unspecified
• cpe qualcomm/wsa8845h firmwareversion unspecified
• cpe qualcomm/x2000077 firmwareversion unspecified
• cpe qualcomm/x2000086 firmwareversion unspecified
• cpe qualcomm/x2000090 firmwareversion unspecified
• cpe qualcomm/x2000092 firmwareversion unspecified
• cpe qualcomm/x2000094 firmwareversion unspecified
• cpe qualcomm/xg101002 firmwareversion unspecified
• cpe qualcomm/xg101032 firmwareversion unspecified
• cpe qualcomm/xg101039 firmwareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2025-47406

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2025-47406

  Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

  nvd.nist.gov

References

• Vendor Advisory · docs.qualcomm.com