CVE-2025-21457
MEDIUM EPSS 0.2%
Published Aug 6, 202510mo ago · Modified Jun 17, 20261w ago
6.1 CVSS 3.1
Published Aug 6, 2025 10mo ago
Last Modified Jun 17, 2026 1w ago
Description
Information disclosure while opening a fastrpc session when domain is not sanitized.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability Low
Threat Intelligence
EPSS Exploit Probability
0.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-126
Affected Products 30
| Vendor | Product | Version | Range |
|---|---|---|---|
| qualcomm | ar8035_firmware | * | any |
| qualcomm | ar8035 | * | any |
| qualcomm | fastconnect_7800_firmware | * | any |
| qualcomm | fastconnect_7800 | * | any |
| qualcomm | qca6584au_firmware | * | any |
| qualcomm | qca6584au | * | any |
| qualcomm | qca6698aq_firmware | * | any |
| qualcomm | qca6698aq | * | any |
| qualcomm | qca8081_firmware | * | any |
| qualcomm | qca8081 | * | any |
| qualcomm | qca8337_firmware | * | any |
| qualcomm | qca8337 | * | any |
| qualcomm | qcc710_firmware | * | any |
| qualcomm | qcc710 | * | any |
| qualcomm | qcn6224_firmware | * | any |
| qualcomm | qcn6224 | * | any |
| qualcomm | qcn6274_firmware | * | any |
| qualcomm | qcn6274 | * | any |
| qualcomm | qfw7114_firmware | * | any |
| qualcomm | qfw7114 | * | any |
| qualcomm | qfw7124_firmware | * | any |
| qualcomm | qfw7124 | * | any |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2_firmware | * | any |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2 | * | any |
| qualcomm | snapdragon_x72_5g_modem-rf_system_firmware | * | any |
| qualcomm | snapdragon_x72_5g_modem-rf_system | * | any |
| qualcomm | snapdragon_x75_5g_modem-rf_system_firmware | * | any |
| qualcomm | snapdragon_x75_5g_modem-rf_system | * | any |
| qualcomm | wcd9340_firmware | * | any |
| qualcomm | wcd9340 | * | any |
References 1
- docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html
Remediation
- docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html