This vulnerability (CVE-2025-47390) is a buffer over-read (CWE-126) caused by memory corruption during the preprocessing of IOCTL requests in the JPEG driver on Qualcomm Snapdragon platforms. It affects a broad range of Qualcomm products including various FastConnect modules, Snapdragon compute platforms, and audio codecs. The CVSS 3.1 score of 7.8 reflects local attack vector with low complexity and low privileges required, but with high impact on confidentiality, integrity, and availability. The vendor has not published any remediation or patch information yet, and the vulnerability is not related to cloud services.

Successful exploitation could lead to unauthorized disclosure of information, modification of data, or denial of service due to memory corruption in the JPEG driver. The vulnerability requires local access with low privileges and no user interaction, making it a significant risk on affected devices. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to affected devices and monitor for updates from Qualcomm. No vendor-provided mitigations or workarounds are currently documented.