This vulnerability (CVE-2025-47389) involves a classic buffer overflow (CWE-120) in Qualcomm Snapdragon products. The issue arises from a memory corruption caused by an integer overflow during a buffer copy operation in the attestation report generation process. This can lead to overwriting memory, potentially allowing an attacker with local privileges to compromise system confidentiality, integrity, and availability. The vulnerability affects numerous Snapdragon platforms and related hardware components. The CVSS 3.1 base score is 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating it requires local access with low complexity and low privileges but can have high impact. No patch or official remediation level has been published by Qualcomm as of now.

Successful exploitation of this vulnerability can result in memory corruption leading to compromise of confidentiality, integrity, and availability of the affected device. Given the nature of the buffer overflow and the high CVSS score, an attacker with local privileges could potentially execute arbitrary code or cause denial of service. However, exploitation requires local access and low privileges. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been published by Qualcomm, users should monitor Qualcomm's security advisories for updates. Until a patch is available, limiting local access to trusted users and minimizing exposure of vulnerable components may reduce risk.