CVE-2025-47391

CVE-2025-47391 is a memory corruption vulnerability triggered during frame request processing from user-supplied input. The vulnerability affects an unspecified product and stems from improper handling of user-provided data that can corrupt memory during operation. This flaw requires local access with standard user privileges to exploit, presenting a moderate but significant threat to affected systems. The vulnerability carries a HIGH severity rating with a CVSS score of 7.8, indicating it could lead to complete compromise of system confidentiality, integrity, and availability. The attack requires local access with low complexity, meaning an authenticated user can reliably trigger the vulnerability without complex preparation or user interaction. The potential impact encompasses unauthorized information disclosure, data modification, and denial of service capabilities. Currently, CVE-2025-47391 is not listed on the Known Exploited Vulnerabilities catalog, and there is no evidence of active exploitation in the wild. The vulnerability maintains an inactive status on industry hotlists, and the extremely low EPSS score of 0.00006 suggests minimal real-world exploitation probability at this time. However, the moderate FAUCET Risk Score of 49.0 indicates organizations should prioritize patching to prevent potential future exploitation.