CVE-2025-21429
HIGH EPSS 13.7%
Published Apr 7, 20251y ago · Modified Jun 17, 20262w ago
7.5 CVSS 3.1
Published Apr 7, 2025 1y ago
Last Modified Jun 17, 2026 2w ago
Description
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
13.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-126
Affected Products 364
| Vendor | Product | Version | Range |
|---|---|---|---|
| qualcomm | sa9000p_firmware | * | any |
| qualcomm | sa9000p | * | any |
| qualcomm | sd626_firmware | * | any |
| qualcomm | sd626 | * | any |
| qualcomm | sd660_firmware | * | any |
| qualcomm | sd660 | * | any |
| qualcomm | sd670_firmware | * | any |
| qualcomm | sd670 | * | any |
| qualcomm | sd730_firmware | * | any |
| qualcomm | sd730 | * | any |
| qualcomm | sd855_firmware | * | any |
| qualcomm | sd855 | * | any |
| qualcomm | sd865_5g_firmware | * | any |
| qualcomm | sd865_5g | * | any |
| qualcomm | sdm429w_firmware | * | any |
| qualcomm | sdm429w | * | any |
| qualcomm | sdx55_firmware | * | any |
| qualcomm | sdx55 | * | any |
| qualcomm | sdx61_firmware | * | any |
| qualcomm | sdx61 | * | any |
| qualcomm | sm4125_firmware | * | any |
| qualcomm | sm4125 | * | any |
| qualcomm | sm6250_firmware | * | any |
| qualcomm | sm6250 | * | any |
| qualcomm | sm6370_firmware | * | any |
| qualcomm | sm6370 | * | any |
| qualcomm | smart_audio_200_platform_firmware | * | any |
| qualcomm | smart_audio_200_platform | * | any |
| qualcomm | smart_audio_400_platform_firmware | * | any |
| qualcomm | smart_audio_400_platform | * | any |
| qualcomm | smart_display_200_platform_firmware | * | any |
| qualcomm | smart_display_200_platform | * | any |
| qualcomm | snapdragon_1200_wearable_platform_firmware | * | any |
| qualcomm | snapdragon_1200_wearable_platform | * | any |
| qualcomm | snapdragon_210_processor_firmware | * | any |
| qualcomm | snapdragon_210_processor | * | any |
| qualcomm | snapdragon_212_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_212_mobile_platform | * | any |
| qualcomm | snapdragon_4_gen_1_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_4_gen_1_mobile_platform | * | any |
| qualcomm | snapdragon_429_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_429_mobile_platform | * | any |
| qualcomm | snapdragon_460_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_460_mobile_platform | * | any |
| qualcomm | snapdragon_480_5g_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_480_5g_mobile_platform | * | any |
| qualcomm | snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware | * | any |
| qualcomm | snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\) | * | any |
| qualcomm | snapdragon_625_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_625_mobile_platform | * | any |
| qualcomm | snapdragon_626_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_626_mobile_platform | * | any |
| qualcomm | snapdragon_660_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_660_mobile_platform | * | any |
| qualcomm | snapdragon_662_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_662_mobile_platform | * | any |
| qualcomm | snapdragon_670_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_670_mobile_platform | * | any |
| qualcomm | snapdragon_675_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_675_mobile_platform | * | any |
| qualcomm | snapdragon_678_mobile_platform_\(sm6150-ac\)_firmware | * | any |
| qualcomm | snapdragon_678_mobile_platform_\(sm6150-ac\) | * | any |
| qualcomm | snapdragon_680_4g_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_680_4g_mobile_platform | * | any |
| qualcomm | snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware | * | any |
| qualcomm | snapdragon_685_4g_mobile_platform_\(sm6225-ad\) | * | any |
| qualcomm | snapdragon_695_5g_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_695_5g_mobile_platform | * | any |
| qualcomm | snapdragon_710_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_710_mobile_platform | * | any |
| qualcomm | snapdragon_720g_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_720g_mobile_platform | * | any |
| qualcomm | snapdragon_730_mobile_platform_\(sm7150-aa\)_firmware | * | any |
| qualcomm | snapdragon_730_mobile_platform_\(sm7150-aa\) | * | any |
| qualcomm | snapdragon_730g_mobile_platform_\(sm7150-ab\)_firmware | * | any |
| qualcomm | snapdragon_730g_mobile_platform_\(sm7150-ab\) | * | any |
| qualcomm | snapdragon_732g_mobile_platform_\(sm7150-ac\)_firmware | * | any |
| qualcomm | snapdragon_732g_mobile_platform_\(sm7150-ac\) | * | any |
| qualcomm | snapdragon_8_gen_3_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_8_gen_3_mobile_platform | * | any |
| qualcomm | 9206_lte_modem_firmware | * | any |
| qualcomm | 9206_lte_modem | * | any |
| qualcomm | apq8017_firmware | * | any |
| qualcomm | apq8017 | * | any |
| qualcomm | apq8064au_firmware | * | any |
| qualcomm | apq8064au | * | any |
| qualcomm | aqt1000_firmware | * | any |
| qualcomm | aqt1000 | * | any |
| qualcomm | ar8035_firmware | * | any |
| qualcomm | ar8035 | * | any |
| qualcomm | c-v2x_9150_firmware | * | any |
| qualcomm | c-v2x_9150 | * | any |
| qualcomm | csra6620_firmware | * | any |
| qualcomm | csra6620 | * | any |
| qualcomm | csra6640_firmware | * | any |
| qualcomm | csra6640 | * | any |
| qualcomm | csrb31024_firmware | * | any |
| qualcomm | csrb31024 | * | any |
| qualcomm | fastconnect_6200_firmware | * | any |
| qualcomm | fastconnect_6200 | * | any |
| qualcomm | fastconnect_6700_firmware | * | any |
| qualcomm | fastconnect_6700 | * | any |
| qualcomm | fastconnect_6800_firmware | * | any |
| qualcomm | fastconnect_6800 | * | any |
| qualcomm | fastconnect_6900_firmware | * | any |
| qualcomm | fastconnect_6900 | * | any |
| qualcomm | fastconnect_7800_firmware | * | any |
| qualcomm | fastconnect_7800 | * | any |
| qualcomm | mdm9250_firmware | * | any |
| qualcomm | mdm9250 | * | any |
| qualcomm | mdm9628_firmware | * | any |
| qualcomm | mdm9628 | * | any |
| qualcomm | mdm9640_firmware | * | any |
| qualcomm | mdm9640 | * | any |
| qualcomm | mdm9650_firmware | * | any |
| qualcomm | mdm9650 | * | any |
| qualcomm | msm8996au_firmware | * | any |
| qualcomm | msm8996au | * | any |
| qualcomm | qam8255p_firmware | * | any |
| qualcomm | qam8255p | * | any |
| qualcomm | qam8650p_firmware | * | any |
| qualcomm | qam8650p | * | any |
| qualcomm | qam8775p_firmware | * | any |
| qualcomm | qam8775p | * | any |
| qualcomm | qca6174a_firmware | * | any |
| qualcomm | qca6174a | * | any |
| qualcomm | qca6175a_firmware | * | any |
| qualcomm | qca6175a | * | any |
| qualcomm | qca6391_firmware | * | any |
| qualcomm | qca6391 | * | any |
| qualcomm | qca6420_firmware | * | any |
| qualcomm | qca6420 | * | any |
| qualcomm | qca6421_firmware | * | any |
| qualcomm | qca6421 | * | any |
| qualcomm | qca6426_firmware | * | any |
| qualcomm | qca6426 | * | any |
| qualcomm | qca6430_firmware | * | any |
| qualcomm | qca6430 | * | any |
| qualcomm | qca6431_firmware | * | any |
| qualcomm | qca6431 | * | any |
| qualcomm | qca6436_firmware | * | any |
| qualcomm | qca6436 | * | any |
| qualcomm | qca6554a_firmware | * | any |
| qualcomm | qca6554a | * | any |
| qualcomm | qca6564_firmware | * | any |
| qualcomm | qca6564 | * | any |
| qualcomm | qca6564a_firmware | * | any |
| qualcomm | qca6564a | * | any |
| qualcomm | qca6564au_firmware | * | any |
| qualcomm | qca6564au | * | any |
| qualcomm | qca6574_firmware | * | any |
| qualcomm | qca6574 | * | any |
| qualcomm | qca6574a_firmware | * | any |
| qualcomm | qca6574a | * | any |
| qualcomm | qca6574au_firmware | * | any |
| qualcomm | qca6574au | * | any |
| qualcomm | qca6584au_firmware | * | any |
| qualcomm | qca6584au | * | any |
| qualcomm | qca6595_firmware | * | any |
| qualcomm | qca6595 | * | any |
| qualcomm | qca6595au_firmware | * | any |
| qualcomm | qca6595au | * | any |
| qualcomm | qca6678aq_firmware | * | any |
| qualcomm | qca6678aq | * | any |
| qualcomm | qca6696_firmware | * | any |
| qualcomm | qca6696 | * | any |
| qualcomm | qca6698aq_firmware | * | any |
| qualcomm | qca6698aq | * | any |
| qualcomm | qca6777aq_firmware | * | any |
| qualcomm | qca6777aq | * | any |
| qualcomm | wcn3615_firmware | * | any |
| qualcomm | wcn3615 | * | any |
| qualcomm | wcn3620_firmware | * | any |
| qualcomm | wcn3620 | * | any |
| qualcomm | wcn3660b_firmware | * | any |
| qualcomm | wcn3660b | * | any |
| qualcomm | wcn3680b_firmware | * | any |
| qualcomm | wcn3680b | * | any |
| qualcomm | wcn3910_firmware | * | any |
| qualcomm | wcn3910 | * | any |
| qualcomm | wcn3950_firmware | * | any |
| qualcomm | wcn3950 | * | any |
| qualcomm | wcn3980_firmware | * | any |
| qualcomm | wcn3980 | * | any |
| qualcomm | wcn3988_firmware | * | any |
| qualcomm | wcn3988 | * | any |
| qualcomm | wcn3990_firmware | * | any |
| qualcomm | wcn3990 | * | any |
| qualcomm | wsa8810_firmware | * | any |
| qualcomm | wsa8810 | * | any |
| qualcomm | wsa8815_firmware | * | any |
| qualcomm | wsa8815 | * | any |
| qualcomm | wsa8830_firmware | * | any |
| qualcomm | wsa8830 | * | any |
| qualcomm | wsa8832_firmware | * | any |
| qualcomm | wsa8832 | * | any |
| qualcomm | wsa8835_firmware | * | any |
| qualcomm | wsa8835 | * | any |
| qualcomm | wsa8840_firmware | * | any |
| qualcomm | wsa8840 | * | any |
| qualcomm | wsa8845_firmware | * | any |
| qualcomm | wsa8845 | * | any |
| qualcomm | wsa8845h_firmware | * | any |
| qualcomm | wsa8845h | * | any |
| qualcomm | qca6787aq_firmware | * | any |
| qualcomm | qca6787aq | * | any |
| qualcomm | qca6797aq_firmware | * | any |
| qualcomm | qca6797aq | * | any |
| qualcomm | qca8081_firmware | * | any |
| qualcomm | qca8081 | * | any |
| qualcomm | qca8337_firmware | * | any |
| qualcomm | qca8337 | * | any |
| qualcomm | qca9367_firmware | * | any |
| qualcomm | qca9367 | * | any |
| qualcomm | qca9377_firmware | * | any |
| qualcomm | qca9377 | * | any |
| qualcomm | qcc2073_firmware | * | any |
| qualcomm | qcc2073 | * | any |
| qualcomm | qcc2076_firmware | * | any |
| qualcomm | qcc2076 | * | any |
| qualcomm | qcm2290_firmware | * | any |
| qualcomm | qcm2290 | * | any |
| qualcomm | qcm4290_firmware | * | any |
| qualcomm | qcm4290 | * | any |
| qualcomm | qcm5430_firmware | * | any |
| qualcomm | qcm5430 | * | any |
| qualcomm | qcm6125_firmware | * | any |
| qualcomm | qcm6125 | * | any |
| qualcomm | qcm6490_firmware | * | any |
| qualcomm | qcm6490 | * | any |
| qualcomm | qcn6024_firmware | * | any |
| qualcomm | qcn6024 | * | any |
| qualcomm | qcn9024_firmware | * | any |
| qualcomm | qcn9024 | * | any |
| qualcomm | qcn9074_firmware | * | any |
| qualcomm | qcn9074 | * | any |
| qualcomm | qcs2290_firmware | * | any |
| qualcomm | qcs2290 | * | any |
| qualcomm | qcs410_firmware | * | any |
| qualcomm | qcs410 | * | any |
| qualcomm | qcs4290_firmware | * | any |
| qualcomm | qcs4290 | * | any |
| qualcomm | qcs5430_firmware | * | any |
| qualcomm | qcs5430 | * | any |
| qualcomm | qcs610_firmware | * | any |
| qualcomm | qcs610 | * | any |
| qualcomm | qcs6125_firmware | * | any |
| qualcomm | qcs6125 | * | any |
| qualcomm | qcs6490_firmware | * | any |
| qualcomm | qcs6490 | * | any |
| qualcomm | qualcomm_205_mobile_platform_firmware | * | any |
| qualcomm | qualcomm_205_mobile_platform | * | any |
| qualcomm | video_collaboration_vc1_platform_firmware | * | any |
| qualcomm | video_collaboration_vc1_platform | * | any |
| qualcomm | video_collaboration_vc3_platform_firmware | * | any |
| qualcomm | video_collaboration_vc3_platform | * | any |
| qualcomm | sa2150p_firmware | * | any |
| qualcomm | sa2150p | * | any |
| qualcomm | sa4150p_firmware | * | any |
| qualcomm | sa4150p | * | any |
| qualcomm | sa4155p_firmware | * | any |
| qualcomm | sa4155p | * | any |
| qualcomm | sa6145p_firmware | * | any |
| qualcomm | sa6145p | * | any |
| qualcomm | sa6150p_firmware | * | any |
| qualcomm | sa6150p | * | any |
| qualcomm | sa6155_firmware | * | any |
| qualcomm | sa6155 | * | any |
| qualcomm | sa6155p_firmware | * | any |
| qualcomm | sa6155p | * | any |
| qualcomm | sa8145p_firmware | * | any |
| qualcomm | sa8145p | * | any |
| qualcomm | sa8150p_firmware | * | any |
| qualcomm | sa8150p | * | any |
| qualcomm | sa8155_firmware | * | any |
| qualcomm | sa8155 | * | any |
| qualcomm | sa8155p_firmware | * | any |
| qualcomm | sa8155p | * | any |
| qualcomm | sa8195p_firmware | * | any |
| qualcomm | sa8195p | * | any |
| qualcomm | sa8530p_firmware | * | any |
| qualcomm | sa8530p | * | any |
| qualcomm | sa8540p_firmware | * | any |
| qualcomm | sa8540p | * | any |
| qualcomm | snapdragon_8\+_gen_1_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_8\+_gen_1_mobile_platform | * | any |
| qualcomm | snapdragon_820_automotive_platform_firmware | * | any |
| qualcomm | snapdragon_820_automotive_platform | * | any |
| qualcomm | snapdragon_855_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_855_mobile_platform | * | any |
| qualcomm | snapdragon_855\+\/860_mobile_platform_\(sm8150-ac\)_firmware | * | any |
| qualcomm | snapdragon_855\+\/860_mobile_platform_\(sm8150-ac\) | * | any |
| qualcomm | snapdragon_865_5g_mobile_platform_firmware | * | any |
| qualcomm | snapdragon_865_5g_mobile_platform | * | any |
| qualcomm | snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmware | * | any |
| qualcomm | snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\) | * | any |
| qualcomm | snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmware | * | any |
| qualcomm | snapdragon_870_5g_mobile_platform_\(sm8250-ac\) | * | any |
| qualcomm | snapdragon_auto_5g_modem-rf_firmware | * | any |
| qualcomm | snapdragon_auto_5g_modem-rf | * | any |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2_firmware | * | any |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2 | * | any |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform_firmware | * | any |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform | * | any |
| qualcomm | snapdragon_x24_lte_modem_firmware | * | any |
| qualcomm | snapdragon_x24_lte_modem | * | any |
| qualcomm | snapdragon_x5_lte_modem_firmware | * | any |
| qualcomm | snapdragon_x5_lte_modem | * | any |
| qualcomm | snapdragon_x50_5g_modem-rf_system_firmware | * | any |
| qualcomm | snapdragon_x50_5g_modem-rf_system | * | any |
| qualcomm | snapdragon_x55_5g_modem-rf_system_firmware | * | any |
| qualcomm | snapdragon_x55_5g_modem-rf_system | * | any |
| qualcomm | snapdragon_x62_5g_modem-rf_system_firmware | * | any |
| qualcomm | snapdragon_x62_5g_modem-rf_system | * | any |
| qualcomm | snapdragon_x65_5g_modem-rf_system_firmware | * | any |
| qualcomm | snapdragon_x65_5g_modem-rf_system | * | any |
| qualcomm | snapdragon_xr1_platform_firmware | * | any |
| qualcomm | snapdragon_xr1_platform | * | any |
| qualcomm | snapdragon_xr2_5g_platform_firmware | * | any |
| qualcomm | snapdragon_xr2_5g_platform | * | any |
| qualcomm | snapdragon_xr2\+_gen_1_platform_firmware | * | any |
| qualcomm | snapdragon_xr2\+_gen_1_platform | * | any |
| qualcomm | snapdragon_auto_4g_modem_firmware | * | any |
| qualcomm | snapdragon_auto_4g_modem | * | any |
| qualcomm | sw5100_firmware | * | any |
| qualcomm | sw5100 | * | any |
| qualcomm | sw5100p_firmware | * | any |
| qualcomm | sw5100p | * | any |
| qualcomm | sxr1120_firmware | * | any |
| qualcomm | sxr1120 | * | any |
| qualcomm | sxr2130_firmware | * | any |
| qualcomm | sxr2130 | * | any |
| qualcomm | sxr2230p_firmware | * | any |
| qualcomm | sxr2230p | * | any |
| qualcomm | sxr2250p_firmware | * | any |
| qualcomm | sxr2250p | * | any |
| qualcomm | vision_intelligence_100_platform_\(apq8053-aa\)_firmware | * | any |
| qualcomm | vision_intelligence_100_platform_\(apq8053-aa\) | * | any |
| qualcomm | vision_intelligence_200_platform_\(apq8053-ac\)_firmware | * | any |
| qualcomm | vision_intelligence_200_platform_\(apq8053-ac\) | * | any |
| qualcomm | wcd9326_firmware | * | any |
| qualcomm | wcd9326 | * | any |
| qualcomm | wcd9330_firmware | * | any |
| qualcomm | wcd9330 | * | any |
| qualcomm | wcd9335_firmware | * | any |
| qualcomm | wcd9335 | * | any |
| qualcomm | wcd9341_firmware | * | any |
| qualcomm | wcd9341 | * | any |
| qualcomm | wcd9360_firmware | * | any |
| qualcomm | wcd9360 | * | any |
| qualcomm | wcd9370_firmware | * | any |
| qualcomm | wcd9370 | * | any |
| qualcomm | wcd9375_firmware | * | any |
| qualcomm | wcd9375 | * | any |
| qualcomm | wcd9380_firmware | * | any |
| qualcomm | wcd9380 | * | any |
| qualcomm | wcd9385_firmware | * | any |
| qualcomm | wcd9385 | * | any |
| qualcomm | wcd9390_firmware | * | any |
| qualcomm | wcd9390 | * | any |
| qualcomm | wcd9395_firmware | * | any |
| qualcomm | wcd9395 | * | any |
| qualcomm | wcn3610_firmware | * | any |
| qualcomm | wcn3610 | * | any |
References 1
- docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.