CVE-2025-47407 PUBLISHED

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Assigner: qualcomm
Reserved: 06.05.2025 Published: 04.05.2026 Updated: 05.05.2026

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.8

Attack Vector	Local	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	Low	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Qualcomm, Inc.
Product	Snapdragon
Versions	Default: unaffected Version CQ7790 is affected Version CQ8725S is affected Version FastConnect 6200 is affected Version FastConnect 6700 is affected Version FastConnect 6900 is affected Version FastConnect 7800 is affected Version G2 Gen 1 is affected Version Molokai is affected Version Netrani is affected Version Orne is affected Version Palawan25 is affected Version Pandeiro is affected Version QCA6391 is affected Version QCM2290 is affected Version QCM4325 is affected Version QCS2290 is affected Version QCS4290 is affected Version QLN1083BD is affected Version QLN1086BD is affected Version QMB715 is affected Version QMP1000 is affected Version QMP2001 is affected Version QPA1083BD is affected Version QPA1086BD is affected Version Qualcomm Video Collaboration VC1 Platform is affected Version Qualcomm Video Collaboration VC3 Platform is affected Version QXM1083 is affected Version QXM1086 is affected Version QXM1093 is affected Version QXM1094 is affected Version QXM1095 is affected Version QXM1096 is affected Version SAR1165P is affected Version SAR2130P is affected Version SC8380XP is affected Version SD662 is affected Version SD865 5G is affected Version SM6225P is affected Version SM6450P is affected Version SM6475P is affected Version SM6475Q is affected Version SM6850 is affected Version SM7435 is affected Version SM7435P is affected Version SM7635P is affected Version SM8735P is affected Version SM8750P is affected Version SM8845P is affected Version Snapdragon 4 Gen 2 Mobile Platform is affected Version Snapdragon 460 Mobile Platform is affected Version Snapdragon 6 Gen 1 Mobile Platform is affected Version Snapdragon 6 Gen 3 Mobile Platform is affected Version Snapdragon 662 Mobile Platform is affected Version Snapdragon 680 4G Mobile Platform is affected Version Snapdragon 685 4G Mobile Platform is affected Version Snapdragon 7 Gen 4 Mobile Platform is affected Version Snapdragon 8 Elite is affected Version Snapdragon 8 Elite Gen 5 is affected Version Snapdragon AR1+ Gen 1 Platform is affected Version Snapdragon W5+ Gen 1 Wearable Platform is affected Version Snapdragon XR2 5G Platform is affected Version Snapdragon XR2+ Gen 1 Platform is affected Version Snapdragon Wear Elite platform is affected Version SW5100 is affected Version SW5100P is affected Version SXR2230P is affected Version SXR2250P is affected Version SXR2330P is affected Version SXR2350P is affected Version Themisto is affected Version WCD9370 is affected Version WCD9375 is affected Version WCD9378 is affected Version WCD9380 is affected Version WCD9385 is affected Version WCD9395 is affected Version WCN3950 is affected Version WCN3980 is affected Version WCN3988 is affected Version WCN6450 is affected Version WCN6755 is affected Version WCN7760 is affected Version WCN7860 is affected Version WCN7861 is affected Version WCN7880 is affected Version WCN7881 is affected Version WSA8810 is affected Version WSA8815 is affected Version WSA8830 is affected Version WSA8832 is affected Version WSA8835 is affected Version WSA8840 is affected Version WSA8845 is affected Version WSA8845H is affected Version WSA8850 is affected Version WSA8850W is affected Version WSA8855C is affected Version X1E80100 is affected Version XRV7209 is affected Version XRV9209 is affected

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html

Problem Types

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition CWE