This vulnerability (CVE-2025-47400) is classified as CWE-126 (Buffer Over-read) and affects various Qualcomm Snapdragon products including Pandeiro, Snapdragon 8 Elite Gen 5, and others. The issue arises from copying data to a destination buffer without proper size validation, causing a buffer over-read during cryptographic operations. The CVSS v3.1 base score is 7.1, indicating high severity with local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high confidentiality and integrity impact but no availability impact. No patch or official remediation level has been published by Qualcomm as of the data provided.

Successful exploitation could lead to unauthorized disclosure of sensitive data due to buffer over-read during cryptographic processing. The impact affects confidentiality and integrity but does not affect system availability. The vulnerability requires local access with low privileges and no user interaction, limiting the attack surface. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to affected devices and monitor for updates from Qualcomm. Avoid deploying affected Snapdragon versions in sensitive environments if possible until remediation is available.