This vulnerability (CVE-2025-47406) is a buffer over-read issue classified under CWE-126 found in Qualcomm Snapdragon products. It occurs when IOCTL handler callbacks process data without proper verification of buffer sizes, potentially allowing an attacker with local privileges to cause information disclosure. The CVSS 3.1 base score is 6.1 (medium severity), reflecting a local attack vector with low complexity and no user interaction required, resulting in high confidentiality impact but no integrity or availability impact. Affected products include a broad range of Qualcomm Snapdragon chipsets and platforms. No patch or official remediation level has been provided by the vendor yet.

The vulnerability allows an attacker with local privileges to read beyond the intended buffer boundaries during IOCTL handler callback processing, leading to potential disclosure of sensitive information. It does not impact integrity or availability. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to affected devices and monitor for vendor updates.