CVE-2025-47401
MEDIUMDescription
Transient DOS when processing target power rate tables during channel configuration.
CVSS v3.1 Score
EPSS — Exploit Prediction
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | fastconnect_6200_firmware |
| qualcomm | fastconnect_6200 |
| qualcomm | fastconnect_6700_firmware |
| qualcomm | fastconnect_6700 |
| qualcomm | fastconnect_6900_firmware |
| qualcomm | fastconnect_6900 |
| qualcomm | fastconnect_7800_firmware |
| qualcomm | fastconnect_7800 |
| qualcomm | flight_rb5_5g_firmware |
| qualcomm | flight_rb5_5g |
| qualcomm | fwa_gen_3_ultra_firmware |
| qualcomm | fwa_gen_3_ultra |
| qualcomm | g2_gen_1_firmware |
| qualcomm | g2_gen_1 |
| qualcomm | g3x_gen_2_firmware |
| qualcomm | g3x_gen_2 |
| qualcomm | immersive_home_3210_firmware |
| qualcomm | immersive_home_3210 |
| qualcomm | immersive_home_326_firmware |
| qualcomm | immersive_home_326 |
| qualcomm | ipq5300_firmware |
| qualcomm | ipq5300 |
| qualcomm | ipq5302_firmware |
| qualcomm | ipq5302 |
| qualcomm | ipq5312_firmware |
| qualcomm | ipq5312 |
| qualcomm | ipq5332_firmware |
| qualcomm | ipq5332 |
| qualcomm | ipq9008_firmware |
| qualcomm | ipq9008 |
| qualcomm | ipq9554_firmware |
| qualcomm | ipq9554 |
| qualcomm | ipq9570_firmware |
| qualcomm | ipq9570 |
| qualcomm | ipq9574_firmware |
| qualcomm | ipq9574 |
| qualcomm | iqx5121_firmware |
| qualcomm | iqx5121 |
| qualcomm | iqx7181_firmware |
| qualcomm | iqx7181 |
| qualcomm | lemans_au_lgit_firmware |
| qualcomm | lemans_au_lgit |
| qualcomm | lemansau_firmware |
| qualcomm | lemansau |
| qualcomm | marina_firmware |
| qualcomm | marina |
| qualcomm | milos_firmware |
| qualcomm | milos |
| qualcomm | milos_iot_firmware |
| qualcomm | milos_iot |
| qualcomm | molokai_firmware |
| qualcomm | molokai |
| qualcomm | monaco_iot_firmware |
| qualcomm | monaco_iot |
| qualcomm | netrani_firmware |
| qualcomm | netrani |
| qualcomm | networking_pro_1200_firmware |
| qualcomm | networking_pro_1200 |
| qualcomm | networking_pro_1210_firmware |
| qualcomm | networking_pro_1210 |
| qualcomm | networking_pro_1610_firmware |
| qualcomm | networking_pro_1610 |
| qualcomm | networking_pro_610_firmware |
| qualcomm | networking_pro_610 |
| qualcomm | networking_pro_810_firmware |
| qualcomm | networking_pro_810 |
| qualcomm | orne_firmware |
| qualcomm | orne |
| qualcomm | palawan25_firmware |
| qualcomm | palawan25 |
| qualcomm | pandeiro_firmware |
| qualcomm | pandeiro |
| qualcomm | qam8255p_firmware |
| qualcomm | qam8255p |
| qualcomm | qam8295p_firmware |
| qualcomm | qam8295p |
| qualcomm | qam8397p_firmware |
| qualcomm | qam8397p |
| qualcomm | qamsrv1h_firmware |
| qualcomm | qamsrv1h |
| qualcomm | sm8650q_firmware |
| qualcomm | sm8650q |
| qualcomm | sm8735p_firmware |
| qualcomm | sm8735p |
| qualcomm | sm8750p_firmware |
| qualcomm | sm8750p |
| qualcomm | sm8845p_firmware |
| qualcomm | sm8845p |
| qualcomm | snapdragon_4_gen_2_mobile_firmware |
| qualcomm | snapdragon_4_gen_2_mobile |
| qualcomm | snapdragon_6_gen_1_mobile_firmware |
| qualcomm | snapdragon_6_gen_1_mobile |
| qualcomm | snapdragon_6_gen_3_mobile_firmware |
| qualcomm | snapdragon_6_gen_3_mobile |
| qualcomm | snapdragon_6_gen_4_mobile_firmware |
| qualcomm | snapdragon_6_gen_4_mobile |
| qualcomm | snapdragon_7_gen_1_mobile_firmware |
| qualcomm | snapdragon_7_gen_1_mobile |
| qualcomm | snapdragon_7_gen_4_mobile_firmware |
| qualcomm | snapdragon_7_gen_4_mobile |
| qualcomm | snapdragon_7\+_gen_2_mobile_firmware |
| qualcomm | snapdragon_7\+_gen_2_mobile |
| qualcomm | snapdragon_7s_gen_3_mobile_firmware |
| qualcomm | snapdragon_7s_gen_3_mobile |
| qualcomm | snapdragon_8_elite_firmware |
| qualcomm | snapdragon_8_elite |
| qualcomm | snapdragon_8_elite_gen_5_firmware |
| qualcomm | snapdragon_8_elite_gen_5 |
| qualcomm | snapdragon_8_gen_1_mobile_firmware |
| qualcomm | snapdragon_8_gen_1_mobile |
| qualcomm | snapdragon_8_gen_2_mobile_firmware |
| qualcomm | snapdragon_8_gen_2_mobile |
| qualcomm | snapdragon_8_gen_3_mobile_firmware |
| qualcomm | snapdragon_8_gen_3_mobile |
| qualcomm | snapdragon_8\+_gen_1_mobile_firmware |
| qualcomm | snapdragon_8\+_gen_1_mobile |
| qualcomm | snapdragon_8\+_gen_2_mobile_firmware |
| qualcomm | snapdragon_8\+_gen_2_mobile |
| qualcomm | snapdragon_888_5g_mobile_firmware |
| qualcomm | snapdragon_888_5g_mobile |
| qualcomm | snapdragon_888\+_5g_mobile_firmware |
| qualcomm | snapdragon_888\+_5g_mobile |
| qualcomm | snapdragon_8cx_gen_3_compute_firmware |
| qualcomm | snapdragon_8cx_gen_3_compute |
| qualcomm | snapdragon_ar1_gen_1_firmware |
| qualcomm | snapdragon_ar1_gen_1 |
| qualcomm | snapdragon_ar1\+_gen_1_firmware |
| qualcomm | snapdragon_ar1\+_gen_1 |
| qualcomm | snapdragon_auto_5g_modem-rf_firmware |
| qualcomm | snapdragon_auto_5g_modem-rf |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2_firmware |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2 |
| qualcomm | snapdragon_x32_5g_modem-rf_firmware |
| qualcomm | snapdragon_x32_5g_modem-rf |
| qualcomm | snapdragon_x35_5g_modem-rf_firmware |
| qualcomm | snapdragon_x35_5g_modem-rf |
| qualcomm | snapdragon_x62_5g_modem-rf_firmware |
| qualcomm | snapdragon_x62_5g_modem-rf |
| qualcomm | snapdragon_x65_5g_modem-rf_firmware |
| qualcomm | snapdragon_x65_5g_modem-rf |
| qualcomm | snapdragon_x72_5g_modem-rf_firmware |
| qualcomm | snapdragon_x72_5g_modem-rf |
| qualcomm | snapdragon_x75_5g_modem-rf_firmware |
| qualcomm | snapdragon_x75_5g_modem-rf |
| qualcomm | srv1h_firmware |
| qualcomm | srv1h |
| qualcomm | srv1m_firmware |
| qualcomm | srv1m |
| qualcomm | sxr2230p_firmware |
| qualcomm | sxr2230p |
| qualcomm | sxr2250p_firmware |
| qualcomm | sxr2250p |
| qualcomm | sxr2330p_firmware |
| qualcomm | sxr2330p |
| qualcomm | sxr2350p_firmware |
| qualcomm | sxr2350p |
| qualcomm | wcd9340_firmware |
| qualcomm | wcd9340 |
| qualcomm | wcd9370_firmware |
| qualcomm | wcd9370 |
| qualcomm | ar8035_firmware |
| qualcomm | ar8035 |
| qualcomm | cologne_firmware |
| qualcomm | cologne |
| qualcomm | cq7790_firmware |
| qualcomm | cq7790 |
| qualcomm | cq8725s_firmware |
| qualcomm | cq8725s |
| qualcomm | cq8750m_firmware |
| qualcomm | cq8750m |
| qualcomm | qamsrv1m_firmware |
| qualcomm | qamsrv1m |
| qualcomm | qca0000_firmware |
| qualcomm | qca0000 |
| qualcomm | qca2062_firmware |
| qualcomm | qca2062 |
| qualcomm | qca2064_firmware |
| qualcomm | qca2064 |
| qualcomm | qca2065_firmware |
| qualcomm | qca2065 |
| qualcomm | qca2066_firmware |
| qualcomm | qca2066 |
| qualcomm | qca6174a_firmware |
| qualcomm | qca6174a |
| qualcomm | qca6391_firmware |
| qualcomm | qca6391 |
| qualcomm | qca6554a_firmware |
| qualcomm | qca6554a |
| qualcomm | qca6564au_firmware |
| qualcomm | qca6564au |
| qualcomm | qca6574_firmware |
| qualcomm | qca6574 |
| qualcomm | qca6574a_firmware |
| qualcomm | qca6574a |
| qualcomm | qca6574au_firmware |
| qualcomm | qca6574au |
| qualcomm | qca6584au_firmware |
| qualcomm | qca6584au |
| qualcomm | qca6595_firmware |
| qualcomm | qca6595 |
| qualcomm | qca6595au_firmware |
| qualcomm | qca6595au |
| qualcomm | qca6678aq_firmware |
| qualcomm | qca6678aq |
| qualcomm | qca6688aq_firmware |
| qualcomm | qca6688aq |
| qualcomm | qca6696_firmware |
| qualcomm | qca6696 |
| qualcomm | qca6698aq_firmware |
| qualcomm | qca6698aq |
| qualcomm | qca6777aq_firmware |
| qualcomm | qca6777aq |
| qualcomm | qca6787aq_firmware |
| qualcomm | qca6787aq |
| qualcomm | qca6797aq_firmware |
| qualcomm | qca6797aq |
| qualcomm | qca8075_firmware |
| qualcomm | qca8075 |
| qualcomm | qca8080_firmware |
| qualcomm | qca8080 |
| qualcomm | qca8081_firmware |
| qualcomm | qca8081 |
| qualcomm | qca8082_firmware |
| qualcomm | qca8082 |
| qualcomm | qca8084_firmware |
| qualcomm | qca8084 |
| qualcomm | qca8085_firmware |
| qualcomm | qca8085 |
| qualcomm | qca8101_firmware |
| qualcomm | qca8101 |
| qualcomm | qca8102_firmware |
| qualcomm | qca8102 |
| qualcomm | qca8111_firmware |
| qualcomm | qca8111 |
| qualcomm | qca8112_firmware |
| qualcomm | qca8112 |
| qualcomm | qca8337_firmware |
| qualcomm | qca8337 |
| qualcomm | qca8384_firmware |
| qualcomm | qca8384 |
| qualcomm | qca8385_firmware |
| qualcomm | qca8385 |
| qualcomm | qca8386_firmware |
| qualcomm | qca8386 |
| qualcomm | qca8695au_firmware |
| qualcomm | qca8695au |
| qualcomm | qcc710_firmware |
| qualcomm | qcc710 |
| qualcomm | qcf8000_firmware |
| qualcomm | qcf8000 |
| qualcomm | wcd9371_firmware |
| qualcomm | wcd9371 |
| qualcomm | wcd9375_firmware |
| qualcomm | wcd9375 |
| qualcomm | wcd9378_firmware |
| qualcomm | wcd9378 |
| qualcomm | wcd9378c_firmware |
| qualcomm | wcd9378c |
| qualcomm | wcd9380_firmware |
| qualcomm | wcd9380 |
| qualcomm | wcd9385_firmware |
| qualcomm | wcd9385 |
| qualcomm | wcd9390_firmware |
| qualcomm | wcd9390 |
| qualcomm | wcd9395_firmware |
| qualcomm | wcd9395 |
| qualcomm | wcn3950_firmware |
| qualcomm | wcn3950 |
| qualcomm | wcn3988_firmware |
| qualcomm | wcn3988 |
| qualcomm | wcn6450_firmware |
| qualcomm | wcn6450 |
| qualcomm | wcn6650_firmware |
| qualcomm | wcn6650 |
| qualcomm | wcn6755_firmware |
| qualcomm | wcn6755 |
| qualcomm | wcn7760_firmware |
| qualcomm | wcn7760 |
| qualcomm | wcn7860_firmware |
| qualcomm | wcn7860 |
| qualcomm | wcn7861_firmware |
| qualcomm | wcn7861 |
| qualcomm | wcn7880_firmware |
| qualcomm | wcn7880 |
| qualcomm | wcn7881_firmware |
| qualcomm | wcn7881 |
| qualcomm | wsa8810_firmware |
| qualcomm | wsa8810 |
| qualcomm | wsa8815_firmware |
| qualcomm | wsa8815 |
| qualcomm | wsa8830_firmware |
| qualcomm | wsa8830 |
| qualcomm | wsa8832_firmware |
| qualcomm | wsa8832 |
| qualcomm | wsa8835_firmware |
| qualcomm | wsa8835 |
| qualcomm | wsa8840_firmware |
| qualcomm | wsa8840 |
| qualcomm | wsa8845_firmware |
| qualcomm | wsa8845 |
| qualcomm | wsa8845h_firmware |
| qualcomm | wsa8845h |
| qualcomm | wsa8850_firmware |
| qualcomm | wsa8850 |
| qualcomm | wsa8850w_firmware |
| qualcomm | wsa8850w |
| qualcomm | wsa8855c_firmware |
| qualcomm | wsa8855c |
| qualcomm | x1e80100_firmware |
| qualcomm | x1e80100 |
| qualcomm | x2000077_firmware |
| qualcomm | x2000077 |
| qualcomm | x2000086_firmware |
| qualcomm | x2000086 |
| qualcomm | x2000090_firmware |
| qualcomm | x2000090 |
| qualcomm | x2000092_firmware |
| qualcomm | x2000092 |
| qualcomm | x2000094_firmware |
| qualcomm | x2000094 |
| qualcomm | xg101002_firmware |
| qualcomm | xg101002 |
| qualcomm | xg101032_firmware |
| qualcomm | xg101032 |
| qualcomm | xg101039_firmware |
| qualcomm | xg101039 |
| qualcomm | xrv7209_firmware |
| qualcomm | xrv7209 |
| qualcomm | xrv9209_firmware |
| qualcomm | xrv9209 |
| qualcomm | qcf8001_firmware |
| qualcomm | qcf8001 |
| qualcomm | qcm4490_firmware |
| qualcomm | qcm4490 |
| qualcomm | qcm5430_firmware |
| qualcomm | qcm5430 |
| qualcomm | qcm6490_firmware |
| qualcomm | qcm6490 |
| qualcomm | qcn5124_firmware |
| qualcomm | qcn5124 |
| qualcomm | qcn5154_firmware |
| qualcomm | qcn5154 |
| qualcomm | qcn5224_firmware |
| qualcomm | qcn5224 |
| qualcomm | qcn6024_firmware |
| qualcomm | qcn6024 |
| qualcomm | qcn6224_firmware |
| qualcomm | qcn6224 |
| qualcomm | qcn6274_firmware |
| qualcomm | qcn6274 |
| qualcomm | qcn6402_firmware |
| qualcomm | qcn6402 |
| qualcomm | qcn6412_firmware |
| qualcomm | qcn6412 |
| qualcomm | qcn6422_firmware |
| qualcomm | qcn6422 |
| qualcomm | qcn6432_firmware |
| qualcomm | qcn6432 |
| qualcomm | qcn9000_firmware |
| qualcomm | qcn9000 |
| qualcomm | qcn9011_firmware |
| qualcomm | qcn9011 |
| qualcomm | qcn9012_firmware |
| qualcomm | qcn9012 |
| qualcomm | qcn9024_firmware |
| qualcomm | qcn9024 |
| qualcomm | qcn9160_firmware |
| qualcomm | qcn9160 |
| qualcomm | qcn9274_firmware |
| qualcomm | qcn9274 |
| qualcomm | qcs4490_firmware |
| qualcomm | qcs4490 |
| qualcomm | qcs6690_firmware |
| qualcomm | qcs6690 |
| qualcomm | qcs8550_firmware |
| qualcomm | qcs8550 |
| qualcomm | qep8111_firmware |
| qualcomm | qep8111 |
| qualcomm | qfw7114_firmware |
| qualcomm | qfw7114 |
| qualcomm | qfw7124_firmware |
| qualcomm | qfw7124 |
| qualcomm | qln1083bd_firmware |
| qualcomm | qln1083bd |
| qualcomm | qln1086bd_firmware |
| qualcomm | qln1086bd |
| qualcomm | qmb415_firmware |
| qualcomm | qmb415 |
| qualcomm | qmb715_firmware |
| qualcomm | qmb715 |
| qualcomm | qmp1000_firmware |
| qualcomm | qmp1000 |
| qualcomm | qmp2001_firmware |
| qualcomm | qmp2001 |
| qualcomm | qpa1083bd_firmware |
| qualcomm | qpa1083bd |
| qualcomm | qpa1086bd_firmware |
| qualcomm | qpa1086bd |
| qualcomm | qrb5165m_firmware |
| qualcomm | qrb5165m |
| qualcomm | qrb5165n_firmware |
| qualcomm | qrb5165n |
| qualcomm | video_collaboration_vc3_firmware |
| qualcomm | video_collaboration_vc3 |
| qualcomm | qxm1083_firmware |
| qualcomm | qxm1083 |
| qualcomm | qxm1086_firmware |
| qualcomm | qxm1086 |
| qualcomm | qxm1093_firmware |
| qualcomm | qxm1093 |
| qualcomm | xrv9209_firmware |
| qualcomm | xrv9209 |
| qualcomm | xrv7209_firmware |
| qualcomm | xrv7209 |
| qualcomm | xrv9209_firmware |
| qualcomm | xrv9209 |
| qualcomm | xrv9209_firmware |
| qualcomm | xrv9209 |
| qualcomm | qxm1094_firmware |
| qualcomm | qxm1094 |
| qualcomm | qxm1095_firmware |
| qualcomm | qxm1095 |
| qualcomm | qxm1096_firmware |
| qualcomm | qxm1096 |
| qualcomm | qxm8083_firmware |
| qualcomm | qxm8083 |
| qualcomm | robotics_rb5_firmware |
| qualcomm | robotics_rb5 |
| qualcomm | sa510m_firmware |
| qualcomm | sa510m |
| qualcomm | sa6155p_firmware |
| qualcomm | sa6155p |
| qualcomm | sa7255p_firmware |
| qualcomm | sa7255p |
| qualcomm | sa7775p_firmware |
| qualcomm | sa7775p |
| qualcomm | sa8155p_firmware |
| qualcomm | sa8155p |
| qualcomm | sa8195p_firmware |
| qualcomm | sa8195p |
| qualcomm | sa8255p_firmware |
| qualcomm | sa8255p |
| qualcomm | sa8295p_firmware |
| qualcomm | sa8295p |
| qualcomm | sa8620p_firmware |
| qualcomm | sa8620p |
| qualcomm | sa8770p_firmware |
| qualcomm | sa8770p |
| qualcomm | sa9000p_firmware |
| qualcomm | sa9000p |
| qualcomm | sar1165p_firmware |
| qualcomm | sar1165p |
| qualcomm | sar2130p_firmware |
| qualcomm | sar2130p |
| qualcomm | sc8380xp_firmware |
| qualcomm | sc8380xp |
| qualcomm | snapdragon_8_gen1_5g_firmware |
| qualcomm | snapdragon_8_gen1_5g |
| qualcomm | sdx61_firmware |
| qualcomm | sdx61 |
| qualcomm | sm6450p_firmware |
| qualcomm | sm6450p |
| qualcomm | sm6475p_firmware |
| qualcomm | sm6475p |
| qualcomm | sm6475q_firmware |
| qualcomm | sm6475q |
| qualcomm | sm6650p_firmware |
| qualcomm | sm6650p |
| qualcomm | sm6850_firmware |
| qualcomm | sm6850 |
| qualcomm | sm7425_firmware |
| qualcomm | sm7425 |
| qualcomm | sm7435_firmware |
| qualcomm | sm7435 |
| qualcomm | sm7435p_firmware |
| qualcomm | sm7435p |
| qualcomm | sm7525_firmware |
| qualcomm | sm7525 |
| qualcomm | sm7550_firmware |
| qualcomm | sm7550 |
| qualcomm | sm7550p_firmware |
| qualcomm | sm7550p |
| qualcomm | sm7635p_firmware |
| qualcomm | sm7635p |
| qualcomm | sm7675_firmware |
| qualcomm | sm7675 |
| qualcomm | sm7675p_firmware |
| qualcomm | sm7675p |
| qualcomm | sm8425_firmware |
| qualcomm | sm8425 |
| qualcomm | sm8475p_firmware |
| qualcomm | sm8475p |
| qualcomm | sm8550p_firmware |
| qualcomm | sm8550p |
| qualcomm | sm8635_firmware |
| qualcomm | sm8635 |
| qualcomm | sm8635p_firmware |
| qualcomm | sm8635p |
References
Frequently Asked Questions
What is CVE-2025-47401? +
How severe is CVE-2025-47401? +
What products are affected by CVE-2025-47401? +
How do I check if I'm vulnerable to CVE-2025-47401? +
Related Vulnerabilities
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet …
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callback, …
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the …
BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain …