Qualcomm Snapdragon CVE-2025-47405

Apply firmware and driver updates from the Qualcomm May 2026 Security Bulletin when released at https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html. For Android devices, monitor OEM security updates that incorporate Qualcomm patches - deployment typically occurs 1-3 months after Qualcomm release depending on manufacturer. Until patches are available, implement defense-in-depth controls: restrict installation of untrusted applications through mobile device management (MDM) policies and app allowlisting to limit attacker's ability to gain initial local access required for exploitation. Disable camera permissions for non-essential applications via Android permission controls, reducing attack surface exposure to camera ioctl interfaces. Consider isolating high-value devices on separate network segments with enhanced monitoring for privilege escalation indicators (unexpected kernel module loads, process UID changes). Note that disabling camera hardware is not practical for most use cases and does not prevent ioctl exploitation by malicious apps. SELinux enforcing mode on Android provides limited containment but should not be relied upon as primary mitigation for kernel memory corruption.