CVE-2025-21468
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | AR8035 | affected |
| Qualcomm, Inc. | Snapdragon | CSRA6620 | affected |
| Qualcomm, Inc. | Snapdragon | CSRA6640 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 6200 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 6700 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 6900 | affected |
| Qualcomm, Inc. | Snapdragon | FastConnect 7800 | affected |
| Qualcomm, Inc. | Snapdragon | Flight RB5 5G Platform | affected |
| Qualcomm, Inc. | Snapdragon | MDM9628 | affected |
| Qualcomm, Inc. | Snapdragon | QAM8295P | affected |
| Qualcomm, Inc. | Snapdragon | QCA6174A | affected |
| Qualcomm, Inc. | Snapdragon | QCA6391 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6564A | affected |
| Qualcomm, Inc. | Snapdragon | QCA6564AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6574 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6574A | affected |
| Qualcomm, Inc. | Snapdragon | QCA6574AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6595 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6595AU | affected |
| Qualcomm, Inc. | Snapdragon | QCA6696 | affected |
| Qualcomm, Inc. | Snapdragon | QCA6698AQ | affected |
| Qualcomm, Inc. | Snapdragon | QCA8081 | affected |
| Qualcomm, Inc. | Snapdragon | QCA8337 | affected |
| Qualcomm, Inc. | Snapdragon | QCA9377 | affected |
| Qualcomm, Inc. | Snapdragon | QCM4490 | affected |
| Qualcomm, Inc. | Snapdragon | QCM5430 | affected |
| Qualcomm, Inc. | Snapdragon | QCM6490 | affected |
| Qualcomm, Inc. | Snapdragon | QCM8550 | affected |
| Qualcomm, Inc. | Snapdragon | QCN6024 | affected |
| Qualcomm, Inc. | Snapdragon | QCN9011 | affected |
| Qualcomm, Inc. | Snapdragon | QCN9012 | affected |
| Qualcomm, Inc. | Snapdragon | QCN9024 | affected |
| Qualcomm, Inc. | Snapdragon | QCN9274 | affected |
| Qualcomm, Inc. | Snapdragon | QCS410 | affected |
| Qualcomm, Inc. | Snapdragon | QCS4490 | affected |
| Qualcomm, Inc. | Snapdragon | QCS5430 | affected |
| Qualcomm, Inc. | Snapdragon | QCS610 | affected |
| Qualcomm, Inc. | Snapdragon | QCS615 | affected |
| Qualcomm, Inc. | Snapdragon | QCS6490 | affected |
| Qualcomm, Inc. | Snapdragon | QCS7230 | affected |
| Qualcomm, Inc. | Snapdragon | QCS8250 | affected |
| Qualcomm, Inc. | Snapdragon | QCS8300 | affected |
| Qualcomm, Inc. | Snapdragon | QCS8550 | affected |
| Qualcomm, Inc. | Snapdragon | QCS9100 | affected |
| Qualcomm, Inc. | Snapdragon | QMP1000 | affected |
| Qualcomm, Inc. | Snapdragon | QRB5165M | affected |
| Qualcomm, Inc. | Snapdragon | QRB5165N | affected |
| Qualcomm, Inc. | Snapdragon | QSM8350 | affected |
| Qualcomm, Inc. | Snapdragon | Qualcomm Video Collaboration VC1 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Qualcomm Video Collaboration VC3 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Qualcomm Video Collaboration VC5 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Robotics RB2 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Robotics RB5 Platform | affected |
| Qualcomm, Inc. | Snapdragon | SA4150P | affected |
| Qualcomm, Inc. | Snapdragon | SA4155P | affected |
| Qualcomm, Inc. | Snapdragon | SA6145P | affected |
| Qualcomm, Inc. | Snapdragon | SA6150P | affected |
| Qualcomm, Inc. | Snapdragon | SA6155P | affected |
| Qualcomm, Inc. | Snapdragon | SA8145P | affected |
| Qualcomm, Inc. | Snapdragon | SA8150P | affected |
| Qualcomm, Inc. | Snapdragon | SA8155P | affected |
| Qualcomm, Inc. | Snapdragon | SA8195P | affected |
| Qualcomm, Inc. | Snapdragon | SA8295P | affected |
| Qualcomm, Inc. | Snapdragon | SA8530P | affected |
| Qualcomm, Inc. | Snapdragon | SA8540P | affected |
| Qualcomm, Inc. | Snapdragon | SA9000P | affected |
| Qualcomm, Inc. | Snapdragon | SD 8 Gen1 5G | affected |
| Qualcomm, Inc. | Snapdragon | SD888 | affected |
| Qualcomm, Inc. | Snapdragon | SDX61 | affected |
| Qualcomm, Inc. | Snapdragon | SG8275P | affected |
| Qualcomm, Inc. | Snapdragon | SM6370 | affected |
| Qualcomm, Inc. | Snapdragon | SM6650 | affected |
| Qualcomm, Inc. | Snapdragon | SM6650P | affected |
| Qualcomm, Inc. | Snapdragon | SM7315 | affected |
| Qualcomm, Inc. | Snapdragon | SM7325P | affected |
| Qualcomm, Inc. | Snapdragon | SM7635 | affected |
| Qualcomm, Inc. | Snapdragon | SM7675 | affected |
| Qualcomm, Inc. | Snapdragon | SM7675P | affected |
| Qualcomm, Inc. | Snapdragon | SM8550P | affected |
| Qualcomm, Inc. | Snapdragon | SM8635 | affected |
| Qualcomm, Inc. | Snapdragon | SM8635P | affected |
| Qualcomm, Inc. | Snapdragon | SM8650Q | affected |
| Qualcomm, Inc. | Snapdragon | SM8735 | affected |
| Qualcomm, Inc. | Snapdragon | SM8750 | affected |
| Qualcomm, Inc. | Snapdragon | SM8750P | affected |
| Qualcomm, Inc. | Snapdragon | Smart Audio 400 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 4 Gen 1 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 4 Gen 2 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 480 5G Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 480+ 5G Mobile Platform (SM4350-AC) | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 695 5G Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 778G 5G Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 778G+ 5G Mobile Platform (SM7325-AE) | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 780G 5G Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 782G Mobile Platform (SM7325-AF) | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 7c+ Gen 3 Compute | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8 Gen 1 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8 Gen 2 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8 Gen 3 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8+ Gen 1 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8+ Gen 2 Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 888 5G Mobile Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon 888+ 5G Mobile Platform (SM8350-AC) | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon AR1 Gen 1 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon AR1 Gen 1 Platform "Luna1" | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon AR2 Gen 1 Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon Auto 5G Modem-RF | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon W5+ Gen 1 Wearable Platform | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon X12 LTE Modem | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon X62 5G Modem-RF System | affected |
| Qualcomm, Inc. | Snapdragon | Snapdragon X65 5G Modem-RF System | affected |
| Qualcomm, Inc. | Snapdragon | SSG2115P | affected |
| Qualcomm, Inc. | Snapdragon | SSG2125P | affected |
| Qualcomm, Inc. | Snapdragon | SW5100 | affected |
| Qualcomm, Inc. | Snapdragon | SW5100P | affected |
| Qualcomm, Inc. | Snapdragon | SXR1230P | affected |
| Qualcomm, Inc. | Snapdragon | SXR2230P | affected |
| Qualcomm, Inc. | Snapdragon | SXR2250P | affected |
| Qualcomm, Inc. | Snapdragon | SXR2330P | affected |
| Qualcomm, Inc. | Snapdragon | TalynPlus | affected |
| Qualcomm, Inc. | Snapdragon | Vision Intelligence 400 Platform | affected |
| Qualcomm, Inc. | Snapdragon | WCD9335 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9341 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9370 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9375 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9378 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9380 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9385 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9390 | affected |
| Qualcomm, Inc. | Snapdragon | WCD9395 | affected |
| Qualcomm, Inc. | Snapdragon | WCN3910 | affected |
| Qualcomm, Inc. | Snapdragon | WCN3950 | affected |
| Qualcomm, Inc. | Snapdragon | WCN3980 | affected |
| Qualcomm, Inc. | Snapdragon | WCN3988 | affected |
| Qualcomm, Inc. | Snapdragon | WCN3990 | affected |
| Qualcomm, Inc. | Snapdragon | WCN6450 | affected |
| Qualcomm, Inc. | Snapdragon | WCN6650 | affected |
| Qualcomm, Inc. | Snapdragon | WCN6740 | affected |
| Qualcomm, Inc. | Snapdragon | WCN6755 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7750 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7860 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7861 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7880 | affected |
| Qualcomm, Inc. | Snapdragon | WCN7881 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8810 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8815 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8830 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8832 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8835 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8840 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8845 | affected |
| Qualcomm, Inc. | Snapdragon | WSA8845H | affected |
Weaknesses
- CWE-787: CWE-787: Out-of-bounds Write
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.