CVE-2025-21428
HIGH EPSS 13.2%
Published Apr 7, 20251y ago · Modified Jun 17, 20262w ago
7.5 CVSS 3.1
Published Apr 7, 2025 1y ago
Last Modified Jun 17, 2026 2w ago
Description
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
13.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-126
Affected Products 138
| Vendor | Product | Version | Range |
|---|---|---|---|
| qualcomm | snapdragon_439_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_439_mobile_platform | * | any |
| qualcomm | snapdragon_625_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_625_mobile_platform | * | any |
| qualcomm | snapdragon_626_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_626_mobile_platform | * | any |
| qualcomm | snapdragon_632_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_632_mobile_platform | * | any |
| qualcomm | snapdragon_820_automotive_platform_firmware | * | any |
| qualcomm | snapdragon_820_automotive_platform | * | any |
| qualcomm | snapdragon_auto_5g_modem-rf_firmware | * | any |
| qualcomm | snapdragon_auto_5g_modem-rf | * | any |
| qualcomm | snapdragon_x12_lte_modem_firmware | * | any |
| qualcomm | snapdragon_x12_lte_modem | * | any |
| qualcomm | snapdragon_x35_5g_modem-rf_system_firmware | * | any |
| qualcomm | snapdragon_x35_5g_modem-rf_system | * | any |
| qualcomm | snapdragon_x5_lte_modem_firmware | * | any |
| qualcomm | snapdragon_x5_lte_modem | * | any |
| qualcomm | vision_intelligence_100_platform_\(apq8053-aa\)_firmware | * | any |
| qualcomm | vision_intelligence_100_platform_\(apq8053-aa\) | * | any |
| qualcomm | vision_intelligence_200_platform_\(apq8053-ac\)_firmware | * | any |
| qualcomm | vision_intelligence_200_platform_\(apq8053-ac\) | * | any |
| qualcomm | wcd9326_firmware | * | any |
| qualcomm | wcd9326 | * | any |
| qualcomm | wcd9330_firmware | * | any |
| qualcomm | wcd9330 | * | any |
| qualcomm | wcd9335_firmware | * | any |
| qualcomm | wcd9335 | * | any |
| qualcomm | wcd9340_firmware | * | any |
| qualcomm | wcd9340 | * | any |
| qualcomm | wcn3610_firmware | * | any |
| qualcomm | wcn3610 | * | any |
| qualcomm | wcn3615_firmware | * | any |
| qualcomm | wcn3615 | * | any |
| qualcomm | wcn3620_firmware | * | any |
| qualcomm | wcn3620 | * | any |
| qualcomm | wcn3660b_firmware | * | any |
| qualcomm | wcn3660b | * | any |
| qualcomm | wcn3680_firmware | * | any |
| qualcomm | wcn3680 | * | any |
| qualcomm | wcn3680b_firmware | * | any |
| qualcomm | wcn3680b | * | any |
| qualcomm | wcn3980_firmware | * | any |
| qualcomm | wcn3980 | * | any |
| qualcomm | wsa8810_firmware | * | any |
| qualcomm | wsa8810 | * | any |
| qualcomm | wsa8815_firmware | * | any |
| qualcomm | wsa8815 | * | any |
| qualcomm | 9206_lte_modem_firmware | * | any |
| qualcomm | 9206_lte_modem | * | any |
| qualcomm | apq8017_firmware | * | any |
| qualcomm | apq8017 | * | any |
| qualcomm | ar8031_firmware | * | any |
| qualcomm | ar8031 | * | any |
| qualcomm | c-v2x_9150_firmware | * | any |
| qualcomm | c-v2x_9150 | * | any |
| qualcomm | csra6620_firmware | * | any |
| qualcomm | csra6620 | * | any |
| qualcomm | csra6640_firmware | * | any |
| qualcomm | csra6640 | * | any |
| qualcomm | fastconnect_6200_firmware | * | any |
| qualcomm | fastconnect_6200 | * | any |
| qualcomm | fastconnect_6900_firmware | * | any |
| qualcomm | fastconnect_6900 | * | any |
| qualcomm | mdm9250_firmware | * | any |
| qualcomm | mdm9250 | * | any |
| qualcomm | mdm9628_firmware | * | any |
| qualcomm | mdm9628 | * | any |
| qualcomm | mdm9640_firmware | * | any |
| qualcomm | mdm9640 | * | any |
| qualcomm | mdm9650_firmware | * | any |
| qualcomm | mdm9650 | * | any |
| qualcomm | msm8996au_firmware | * | any |
| qualcomm | msm8996au | * | any |
| qualcomm | qca6174_firmware | * | any |
| qualcomm | qca6174 | * | any |
| qualcomm | qca6174a_firmware | * | any |
| qualcomm | qca6174a | * | any |
| qualcomm | qca6175a_firmware | * | any |
| qualcomm | qca6175a | * | any |
| qualcomm | qca6554a_firmware | * | any |
| qualcomm | qca6554a | * | any |
| qualcomm | qca6564a_firmware | * | any |
| qualcomm | qca6564a | * | any |
| qualcomm | qca6564au_firmware | * | any |
| qualcomm | qca6564au | * | any |
| qualcomm | qca6574_firmware | * | any |
| qualcomm | qca6574 | * | any |
| qualcomm | qca6574a_firmware | * | any |
| qualcomm | qca6574a | * | any |
| qualcomm | qca6574au_firmware | * | any |
| qualcomm | qca6574au | * | any |
| qualcomm | qca6584_firmware | * | any |
| qualcomm | qca6584 | * | any |
| qualcomm | qca6584au_firmware | * | any |
| qualcomm | qca6584au | * | any |
| qualcomm | qca6595_firmware | * | any |
| qualcomm | qca6595 | * | any |
| qualcomm | qca6595au_firmware | * | any |
| qualcomm | qca6595au | * | any |
| qualcomm | qca6696_firmware | * | any |
| qualcomm | qca6696 | * | any |
| qualcomm | qca9367_firmware | * | any |
| qualcomm | qca9367 | * | any |
| qualcomm | qca9377_firmware | * | any |
| qualcomm | qca9377 | * | any |
| qualcomm | qca9379_firmware | * | any |
| qualcomm | qca9379 | * | any |
| qualcomm | qcm2150_firmware | * | any |
| qualcomm | qcm2150 | * | any |
| qualcomm | qep8111_firmware | * | any |
| qualcomm | qep8111 | * | any |
| qualcomm | qualcomm_205_mobile_platform_firmware | * | any |
| qualcomm | qualcomm_205_mobile_platform | * | any |
| qualcomm | qualcomm_215_mobile_platform_firmware | * | any |
| qualcomm | qualcomm_215_mobile_platform | * | any |
| qualcomm | sa2150p_firmware | * | any |
| qualcomm | sa2150p | * | any |
| qualcomm | sd626_firmware | * | any |
| qualcomm | sd626 | * | any |
| qualcomm | sdm429w_firmware | * | any |
| qualcomm | sdm429w | * | any |
| qualcomm | smart_audio_200_platform_firmware | * | any |
| qualcomm | smart_audio_200_platform | * | any |
| qualcomm | smart_audio_400_platform_firmware | * | any |
| qualcomm | smart_audio_400_platform | * | any |
| qualcomm | smart_display_200_platform_\(apq5053-aa\)_firmware | * | any |
| qualcomm | smart_display_200_platform_\(apq5053-aa\) | * | any |
| qualcomm | snapdragon_1200_wearable_platform_firmware | * | any |
| qualcomm | snapdragon_1200_wearable_platform | * | any |
| qualcomm | snapdragon_210_processor_firmware | * | any |
| qualcomm | snapdragon_210_processor | * | any |
| qualcomm | snapdragon_212_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_212_mobile_platform | * | any |
| qualcomm | snapdragon_425_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_425_mobile_platform | * | any |
| qualcomm | snapdragon_429_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_429_mobile_platform | * | any |
References 1
- docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.