CVE-2025-47406 is an information disclosure vulnerability caused by processing IOCTL handler callbacks without verifying the buffer size. This flaw can lead to unauthorized exposure of sensitive information. The vulnerability has a CVSS 3.1 score of 6.1, indicating a medium severity level.