What is the CVSS score of CVE-2025-47331?

CVE-2025-47331 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L. EPSS exploitation probability: 0.0%.

Which versions of Ar8031 Firmware are affected by CVE-2025-47331?

CVE-2025-47331 presents moderate security risk rated CVSS 6.1. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2025-47331?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Ar8031 Firmware CVE-2025-47331

MEDIUM

Buffer Over-read (CWE-126)

2026-01-07 product-security@qualcomm.com

6.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

Patch released

Jan 28, 2026 - 16:52 nvd

Patch available

CVE Published

Jan 07, 2026 - 12:17 nvd

MEDIUM 6.1

DescriptionCVE.org

Information disclosure while processing a firmware event.

AnalysisAI

Information disclosure while processing a firmware event. [CVSS 6.1 MEDIUM]

Technical ContextAI

Classified as CWE-126 (Buffer Over-read). Affects Ar8031 Firmware. Information disclosure while processing a firmware event.

RemediationAI

A vendor patch is available — apply it immediately.

More in Ar8031 Firmware

View all

CVE-2026-21385 HIGH Act Now POC

7.8 Mar 02

A Qualcomm chipset vulnerability (CVE-2026-21385) causes memory corruption through improper integer handling during memo

CVE-2025-27038 HIGH Act Now

7.5 Jun 03

Qualcomm Adreno GPU drivers in Chrome contain a use-after-free vulnerability (CVE-2025-27038, CVSS 7.5) enabling memory

CVE-2022-25727 CRITICAL Act Now

9.8 Nov 15

Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon

CVE-2022-25674 CRITICAL Act Now

9.8 Nov 15

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdra

CVE-2022-25748 CRITICAL Act Now

9.8 Oct 19

Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. Rated critical severity (

CVE-2022-25720 CRITICAL Act Now

9.8 Oct 19

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute

CVE-2022-25718 CRITICAL Act Now

9.8 Oct 19

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Sna

CVE-2022-25687 CRITICAL Act Now

9.8 Oct 19

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdr

CVE-2022-25688 CRITICAL Act Now

9.8 Sep 16

Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, S

CVE-2022-22105 CRITICAL Act Now

9.8 Sep 16

Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon

CVE-2022-25668 CRITICAL Act Now

9.8 Sep 02

Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snap

CVE-2022-25659 CRITICAL Act Now

9.8 Sep 02

Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon

Same weakness CWE-126 – Buffer Over-read

View all

CVE-2017-7668 HIGH

7.5

CVE-2017-7679 CRITICAL POC

9.8

CVE-2021-34584 CRITICAL POC

9.1

CVE-2022-1987 HIGH POC

8.1

CVE-2022-1908 HIGH POC

8.1

CVE-2022-1907 HIGH POC

8.1

CVE-2026-64905 HIGH

7.8

CVE-2023-0817 HIGH POC

7.8

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2025-47331 vulnerability details – vuln.today

Back

Ar8031 Firmware CVE-2025-47331

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Ar8031 Firmware

Same weakness CWE-126 – Buffer Over-read

Same technique Information Disclosure

Share

External POC / Exploit Code