This vulnerability (CVE-2025-47404) is a classic buffer overflow (CWE-120) occurring in Qualcomm Snapdragon products. It arises when the size of a previously allocated buffer is changed dynamically during modification of its contents, leading to memory corruption. The issue affects numerous Snapdragon platforms and related hardware components. The CVSS 3.1 base score is 6.5, with an attack vector limited to local access, high attack complexity, low privileges required, no user interaction, and impacts confidentiality, integrity, and availability to varying degrees. No vendor advisory or patch information is currently available.

Successful exploitation could lead to memory corruption, potentially allowing an attacker with local access and low privileges to compromise confidentiality and integrity, and cause limited availability impact. However, no known exploits in the wild have been reported, and the attack complexity is high, reducing the likelihood of widespread exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been published by Qualcomm, monitoring vendor communications for updates is recommended. No specific mitigations are provided at this time.