Vulnerabilities ›

CVE-2025-47391

High

CWE-121 — Weakness Type

                    Published: Apr 6, 2026                      ·  Modified: Apr 13, 2026                      ·  Source: NVD                

CVSS v3

7.8

🔗 NVD Official

📄 Description (English)

Memory corruption while processing a frame request from user.

🤖 AI Executive Summary

CVE-2025-47391 is a high-severity memory corruption vulnerability (CVSS 7.8) triggered during frame request processing that could allow attackers to execute arbitrary code or cause denial of service. Organizations must apply security patches immediately to prevent potential system compromise.

📄 Description (Arabic)

تحتوي هذه الثغرة على عيب في معالجة طلبات الإطار يؤدي إلى تلف الذاكرة، مما قد يسمح بتنفيذ أكواد عشوائية أو إنكار الخدمة. يؤثر هذا على الأنظمة التي تعالج طلبات الإطارات من المستخدمين دون التحقق الكافي من الحدود والصحة.

🤖 ملخص تنفيذي (AI)

ثغرة تلف الذاكرة عالية الخطورة (CVSS 7.8) تحدث أثناء معالجة طلبات الإطار قد تسمح للمهاجمين بتنفيذ أكواد عشوائية أو إيقاف الخدمة. يجب على المنظمات تطبيق التصحيحات الأمنية فوراً لمنع اختراق النظام.

🤖 AI Intelligence Analysis Analyzed: May 2, 2026 05:19

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: high

🏢 Affected Saudi Sectors

banking telecom government healthcare

🎯 MITRE ATT&CK Techniques

T1190 T1203 T1499

⚖️ Saudi Risk Score (AI)

8.0

/ 10.0

🔧 Remediation Steps (English)

Apply vendor security patches immediately. Implement input validation and bounds checking for frame request processing. Deploy Web Application Firewalls (WAF) to filter malicious frame requests. Monitor system logs for exploitation attempts. Conduct memory safety code reviews and consider using memory-safe programming languages for critical components.

🔧 خطوات المعالجة (العربية)

طبق تصحيحات الأمان من المورد فوراً. طبق التحقق من صحة المدخلات والتحقق من حدود معالجة طلبات الإطار. نشر جدران حماية تطبيقات الويب لتصفية طلبات الإطار الضارة. راقب سجلات النظام لمحاولات الاستغلال. أجرِ مراجعات أمان الذاكرة وفكر في استخدام لغات برمجة آمنة للذاكرة.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

A.7.1 A.12.2.1 A.14.2.1

🔵 SAMA CSF

ID.RA-1 PR.IP-1 DE.CM-1

🟡 ISO 27001:2022

A.12.2.1 A.14.2.1 A.14.2.5

🔗 References & Sources 1

🔗

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2026-bulletin....

product-security@qualcomm.com

Patch Vendor Advisory

📦 Affected Products / CPE 50 entries

qualcomm:wcn3988_firmware:-

qualcomm:wcn6450_firmware:-

qualcomm:wcn6650_firmware:-

qualcomm:wcn6755_firmware:-

qualcomm:wcn7860_firmware:-

qualcomm:wcn7861_firmware:-

qualcomm:wcn7880_firmware:-

qualcomm:wcn7881_firmware:-

qualcomm:wsa8810_firmware:-

qualcomm:wsa8815_firmware:-

qualcomm:wsa8830_firmware:-

qualcomm:wsa8832_firmware:-

qualcomm:wsa8835_firmware:-

qualcomm:wsa8840_firmware:-

qualcomm:wsa8845_firmware:-

qualcomm:wsa8845h_firmware:-

qualcomm:fastconnect_6200_firmware:-

qualcomm:fastconnect_6700_firmware:-

qualcomm:fastconnect_6900_firmware:-

qualcomm:fastconnect_7800_firmware:-

qualcomm:g2_gen_1_firmware:-

qualcomm:iq-615_firmware:-

qualcomm:iq-8275_firmware:-

qualcomm:iq-8300_firmware:-

qualcomm:iq-9100_firmware:-

qualcomm:iq-9075_firmware:-

qualcomm:lemans_au_lgit_firmware:-

qualcomm:lemansau_firmware:-

qualcomm:milos_firmware:-

qualcomm:monaco_iot_firmware:-

qualcomm:netrani_firmware:-

qualcomm:orne_firmware:-

qualcomm:palawan25_firmware:-

qualcomm:pandeiro_firmware:-

qualcomm:qam8255p_firmware:-

qualcomm:qam8397p_firmware:-

qualcomm:qamsrv1h_firmware:-

qualcomm:qamsrv1m_firmware:-

qualcomm:qca6391_firmware:-

qualcomm:qca6595_firmware:-

qualcomm:qca6595au_firmware:-

qualcomm:qca6678aq_firmware:-

qualcomm:qca6698aq_firmware:-

qualcomm:qca6698au_firmware:-

qualcomm:qca6797aq_firmware:-

qualcomm:qca8695au_firmware:-

qualcomm:qcm4490_firmware:-

qualcomm:qcm5430_firmware:-

qualcomm:qcm6490_firmware:-

qualcomm:qcn9011_firmware:-

📊 CVSS Score

7.8

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorL — Low / Local

Attack ComplexityL — Low / Local

Privileges RequiredL — Low / Local

User InteractionN — None / Network

ScopeU — Unchanged

ConfidentialityH — High

IntegrityH — High

AvailabilityH — High

📋 Quick Facts

Severity High

CVSS Score7.8

CWECWE-121

EPSS0.01%

Exploit No

Patch ✓ Yes

Published 2026-04-06

Source Feed nvd

🇸🇦 Saudi Risk Score

8.0

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

patch-available CWE-121

🏢 Vendor Advisories

🔗 https://docs.qualcomm.com/product/publicresources/se...

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

💬 Comments

Loading comments

CVE-2025-47391

💬 Comments

Introduce Yourself

Sign In Required