This vulnerability (CVE-2025-47407) is a TOCTOU race condition categorized under CWE-367, affecting Qualcomm Snapdragon products. The issue arises from memory corruption caused by allocation failure at the kernel level when creating a process on the digital signal processor. The flaw impacts numerous Snapdragon platforms and related hardware components. The CVSS 3.1 base score is 7.8, reflecting high severity with local attack vector, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits have been identified.

Successful exploitation of this vulnerability could result in memory corruption on the digital signal processor, potentially allowing an attacker with local access and low privileges to compromise confidentiality, integrity, and availability of the affected system. The impact is rated high based on the CVSS score of 7.8. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published by Qualcomm, users and administrators should monitor Qualcomm's security advisories for updates. Until a patch is available, limiting local access to trusted users and applying standard security best practices for device access control may reduce risk.