This vulnerability (CVE-2025-47407) is a TOCTOU race condition classified under CWE-367 affecting Qualcomm Snapdragon products. It arises from memory corruption triggered when creating a process on the digital signal processor, specifically due to allocation failure at the kernel level. The flaw impacts numerous Snapdragon platforms and related hardware components. The CVSS 3.1 base score is 7.8 with attack vector local, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No official patch or remediation level has been disclosed by Qualcomm as of the published date.

Successful exploitation of this vulnerability could lead to memory corruption on the digital signal processor, potentially allowing an attacker with local access and low privileges to compromise confidentiality, integrity, and availability of the affected system. The broad range of impacted Snapdragon platforms suggests widespread potential exposure. However, there are no known exploits in the wild currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been provided by Qualcomm, users and administrators should monitor Qualcomm's security advisories for updates. Until a patch is available, limiting local access and applying any recommended security controls from Qualcomm is advised.