CVE-2025-21468
HIGH EPSS 0.5%
Published May 6, 20251y ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
Published May 6, 2025 1y ago
Last Modified Jun 17, 2026 1w ago
Description
Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
0.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-787 Out-of-bounds Write Memory Safety
Affected Products 302
| Vendor | Product | Version | Range |
|---|---|---|---|
| qualcomm | ar8035_firmware | * | any |
| qualcomm | ar8035 | * | any |
| qualcomm | csra6620_firmware | * | any |
| qualcomm | csra6620 | * | any |
| qualcomm | csra6640_firmware | * | any |
| qualcomm | csra6640 | * | any |
| qualcomm | fastconnect_6200_firmware | * | any |
| qualcomm | fastconnect_6200 | * | any |
| qualcomm | fastconnect_6700_firmware | * | any |
| qualcomm | fastconnect_6700 | * | any |
| qualcomm | wcd9380_firmware | * | any |
| qualcomm | wcd9380 | * | any |
| qualcomm | wcd9385_firmware | * | any |
| qualcomm | wcd9385 | * | any |
| qualcomm | wcd9390_firmware | * | any |
| qualcomm | wcd9390 | * | any |
| qualcomm | wcd9395_firmware | * | any |
| qualcomm | wcd9395 | * | any |
| qualcomm | wcn3910_firmware | * | any |
| qualcomm | wcn3910 | * | any |
| qualcomm | wcn3950_firmware | * | any |
| qualcomm | wcn3950 | * | any |
| qualcomm | wcn3980_firmware | * | any |
| qualcomm | wcn3980 | * | any |
| qualcomm | wcn3988_firmware | * | any |
| qualcomm | wcn3988 | * | any |
| qualcomm | wcn3990_firmware | * | any |
| qualcomm | wcn3990 | * | any |
| qualcomm | wcn6450_firmware | * | any |
| qualcomm | wcn6450 | * | any |
| qualcomm | wcn6650_firmware | * | any |
| qualcomm | wcn6650 | * | any |
| qualcomm | wcn6740_firmware | * | any |
| qualcomm | wcn6740 | * | any |
| qualcomm | wcn6755_firmware | * | any |
| qualcomm | wcn6755 | * | any |
| qualcomm | wcn7750_firmware | * | any |
| qualcomm | wcn7750 | * | any |
| qualcomm | qca6595_firmware | * | any |
| qualcomm | qca6595 | * | any |
| qualcomm | qca6595au_firmware | * | any |
| qualcomm | qca6595au | * | any |
| qualcomm | qca6696_firmware | * | any |
| qualcomm | qca6696 | * | any |
| qualcomm | qca6698aq_firmware | * | any |
| qualcomm | qca6698aq | * | any |
| qualcomm | qca8081_firmware | * | any |
| qualcomm | qca8081 | * | any |
| qualcomm | qca8337_firmware | * | any |
| qualcomm | qca8337 | * | any |
| qualcomm | qca9377_firmware | * | any |
| qualcomm | qca9377 | * | any |
| qualcomm | qcm4490_firmware | * | any |
| qualcomm | qcm4490 | * | any |
| qualcomm | qcm5430_firmware | * | any |
| qualcomm | qcm5430 | * | any |
| qualcomm | qcm6490_firmware | * | any |
| qualcomm | qcm6490 | * | any |
| qualcomm | qcm8550_firmware | * | any |
| qualcomm | qcm8550 | * | any |
| qualcomm | qcn6024_firmware | * | any |
| qualcomm | qcn6024 | * | any |
| qualcomm | qcn9011_firmware | * | any |
| qualcomm | qcn9011 | * | any |
| qualcomm | qcn9012_firmware | * | any |
| qualcomm | qcn9012 | * | any |
| qualcomm | qcn9024_firmware | * | any |
| qualcomm | qcn9024 | * | any |
| qualcomm | qcn9274_firmware | * | any |
| qualcomm | qcn9274 | * | any |
| qualcomm | qcs410_firmware | * | any |
| qualcomm | qcs410 | * | any |
| qualcomm | qcs4490_firmware | * | any |
| qualcomm | qcs4490 | * | any |
| qualcomm | qcs5430_firmware | * | any |
| qualcomm | qcs5430 | * | any |
| qualcomm | qcs610_firmware | * | any |
| qualcomm | qcs610 | * | any |
| qualcomm | qcs615_firmware | * | any |
| qualcomm | qcs615 | * | any |
| qualcomm | qcs6490_firmware | * | any |
| qualcomm | qcs6490 | * | any |
| qualcomm | qcs7230_firmware | * | any |
| qualcomm | qcs7230 | * | any |
| qualcomm | qcs8250_firmware | * | any |
| qualcomm | qcs8250 | * | any |
| qualcomm | qcs8300_firmware | * | any |
| qualcomm | qcs8300 | * | any |
| qualcomm | qcs8550_firmware | * | any |
| qualcomm | qcs8550 | * | any |
| qualcomm | qcs9100_firmware | * | any |
| qualcomm | qcs9100 | * | any |
| qualcomm | qmp1000_firmware | * | any |
| qualcomm | qmp1000 | * | any |
| qualcomm | qrb5165m_firmware | * | any |
| qualcomm | qrb5165m | * | any |
| qualcomm | qrb5165n_firmware | * | any |
| qualcomm | qrb5165n | * | any |
| qualcomm | qsm8350_firmware | * | any |
| qualcomm | qsm8350 | * | any |
| qualcomm | video_collaboration_vc1_platform_firmware | * | any |
| qualcomm | video_collaboration_vc1_platform | * | any |
| qualcomm | video_collaboration_vc3_platform_firmware | * | any |
| qualcomm | video_collaboration_vc3_platform | * | any |
| qualcomm | qca6574au_firmware | * | any |
| qualcomm | qca6574au | * | any |
| qualcomm | qca6574a_firmware | * | any |
| qualcomm | qca6574a | * | any |
| qualcomm | qca6574_firmware | * | any |
| qualcomm | qca6574 | * | any |
| qualcomm | qca6564au_firmware | * | any |
| qualcomm | qca6564au | * | any |
| qualcomm | qca6564a_firmware | * | any |
| qualcomm | qca6564a | * | any |
| qualcomm | qca6391_firmware | * | any |
| qualcomm | qca6391 | * | any |
| qualcomm | qca6174a_firmware | * | any |
| qualcomm | qca6174a | * | any |
| qualcomm | qam8295p_firmware | * | any |
| qualcomm | qam8295p | * | any |
| qualcomm | mdm9628_firmware | * | any |
| qualcomm | mdm9628 | * | any |
| qualcomm | flight_rb5_5g_firmware | * | any |
| qualcomm | flight_rb5_5g | * | any |
| qualcomm | fastconnect_7800_firmware | * | any |
| qualcomm | fastconnect_7800 | * | any |
| qualcomm | fastconnect_6900_firmware | * | any |
| qualcomm | fastconnect_6900 | * | any |
| qualcomm | wsa8845h_firmware | * | any |
| qualcomm | wsa8845h | * | any |
| qualcomm | wsa8845_firmware | * | any |
| qualcomm | wsa8845 | * | any |
| qualcomm | wsa8840_firmware | * | any |
| qualcomm | wsa8840 | * | any |
| qualcomm | wsa8835_firmware | * | any |
| qualcomm | wsa8835 | * | any |
| qualcomm | wsa8832_firmware | * | any |
| qualcomm | wsa8832 | * | any |
| qualcomm | wsa8830_firmware | * | any |
| qualcomm | wsa8830 | * | any |
| qualcomm | wsa8815_firmware | * | any |
| qualcomm | wsa8815 | * | any |
| qualcomm | wsa8810_firmware | * | any |
| qualcomm | wsa8810 | * | any |
| qualcomm | wcn7881_firmware | * | any |
| qualcomm | wcn7881 | * | any |
| qualcomm | wcn7880_firmware | * | any |
| qualcomm | wcn7880 | * | any |
| qualcomm | wcn7861_firmware | * | any |
| qualcomm | wcn7861 | * | any |
| qualcomm | wcn7860_firmware | * | any |
| qualcomm | wcn7860 | * | any |
| qualcomm | video_collaboration_vc5_platform_firmware | * | any |
| qualcomm | video_collaboration_vc5_platform | * | any |
| qualcomm | robotics_rb2_firmware | * | any |
| qualcomm | robotics_rb2 | * | any |
| qualcomm | robotics_rb5_firmware | * | any |
| qualcomm | robotics_rb5 | * | any |
| qualcomm | sa4150p_firmware | * | any |
| qualcomm | sa4150p | * | any |
| qualcomm | sa4155p_firmware | * | any |
| qualcomm | sa4155p | * | any |
| qualcomm | sa6145p_firmware | * | any |
| qualcomm | sa6145p | * | any |
| qualcomm | sa6150p_firmware | * | any |
| qualcomm | sa6150p | * | any |
| qualcomm | sa6155p_firmware | * | any |
| qualcomm | sa6155p | * | any |
| qualcomm | sa8145p_firmware | * | any |
| qualcomm | sa8145p | * | any |
| qualcomm | sa8150p_firmware | * | any |
| qualcomm | sa8150p | * | any |
| qualcomm | sa8155p_firmware | * | any |
| qualcomm | sa8155p | * | any |
| qualcomm | sa8195p_firmware | * | any |
| qualcomm | sa8195p | * | any |
| qualcomm | sa8295p_firmware | * | any |
| qualcomm | sa8295p | * | any |
| qualcomm | sa8530p_firmware | * | any |
| qualcomm | sa8530p | * | any |
| qualcomm | sa8540p_firmware | * | any |
| qualcomm | sa8540p | * | any |
| qualcomm | sa9000p_firmware | * | any |
| qualcomm | sa9000p | * | any |
| qualcomm | sd_8_gen1_5g_firmware | * | any |
| qualcomm | sd_8_gen1_5g | * | any |
| qualcomm | sd888_firmware | * | any |
| qualcomm | sd888 | * | any |
| qualcomm | sdx61_firmware | * | any |
| qualcomm | sdx61 | * | any |
| qualcomm | sg8275p_firmware | * | any |
| qualcomm | sg8275p | * | any |
| qualcomm | sm6370_firmware | * | any |
| qualcomm | sm6370 | * | any |
| qualcomm | sm6650_firmware | * | any |
| qualcomm | sm6650 | * | any |
| qualcomm | sm6650p_firmware | * | any |
| qualcomm | sm6650p | * | any |
| qualcomm | sm7315_firmware | * | any |
| qualcomm | sm7315 | * | any |
| qualcomm | sm7325p_firmware | * | any |
| qualcomm | sm7325p | * | any |
| qualcomm | sm7635_firmware | * | any |
| qualcomm | sm7635 | * | any |
| qualcomm | sm7675_firmware | * | any |
| qualcomm | sm7675 | * | any |
| qualcomm | sm7675p_firmware | * | any |
| qualcomm | sm7675p | * | any |
| qualcomm | sm8550p_firmware | * | any |
| qualcomm | sm8550p | * | any |
| qualcomm | sm8635_firmware | * | any |
| qualcomm | sm8635 | * | any |
| qualcomm | sm8635p_firmware | * | any |
| qualcomm | sm8635p | * | any |
| qualcomm | sm8650q_firmware | * | any |
| qualcomm | sm8650q | * | any |
| qualcomm | sm8735_firmware | * | any |
| qualcomm | sm8735 | * | any |
| qualcomm | sm8750_firmware | * | any |
| qualcomm | sm8750 | * | any |
| qualcomm | sm8750p_firmware | * | any |
| qualcomm | sm8750p | * | any |
| qualcomm | smart_audio_400_firmware | * | any |
| qualcomm | smart_audio_400 | * | any |
| qualcomm | snapdragon_4_gen_1_mobile_firmware | * | any |
| qualcomm | snapdragon_4_gen_1_mobile | * | any |
| qualcomm | snapdragon_4_gen_2_mobile_firmware | * | any |
| qualcomm | snapdragon_4_gen_2_mobile | * | any |
| qualcomm | snapdragon_480_5g_mobile_firmware | * | any |
| qualcomm | snapdragon_480_5g_mobile | * | any |
| qualcomm | snapdragon_480\+_5g_mobile_firmware | * | any |
| qualcomm | snapdragon_480\+_5g_mobile | * | any |
| qualcomm | snapdragon_695_5g_mobile_firmware | * | any |
| qualcomm | snapdragon_695_5g_mobile | * | any |
| qualcomm | snapdragon_778g_5g_mobile_firmware | * | any |
| qualcomm | snapdragon_778g_5g_mobile | * | any |
| qualcomm | snapdragon_778g\+_5g_mobile_firmware | * | any |
| qualcomm | snapdragon_778g\+_5g_mobile | * | any |
| qualcomm | snapdragon_780g_5g_mobile_firmware | * | any |
| qualcomm | snapdragon_780g_5g_mobile | * | any |
| qualcomm | snapdragon_782g_mobile_firmware | * | any |
| qualcomm | snapdragon_782g_mobile | * | any |
| qualcomm | snapdragon_7c\+_gen_3_compute_firmware | * | any |
| qualcomm | snapdragon_7c\+_gen_3_compute | * | any |
| qualcomm | snapdragon_8_gen_1_mobile_firmware | * | any |
| qualcomm | snapdragon_8_gen_1_mobile | * | any |
| qualcomm | snapdragon_8_gen_2_mobile_firmware | * | any |
| qualcomm | snapdragon_8_gen_2_mobile | * | any |
| qualcomm | snapdragon_8_gen_3_mobile_firmware | * | any |
| qualcomm | snapdragon_8_gen_3_mobile | * | any |
| qualcomm | snapdragon_8\+_gen_1_mobile_firmware | * | any |
| qualcomm | snapdragon_8\+_gen_1_mobile | * | any |
| qualcomm | snapdragon_8\+_gen_2_mobile_firmware | * | any |
| qualcomm | snapdragon_8\+_gen_2_mobile | * | any |
| qualcomm | snapdragon_888_5g_mobile_firmware | * | any |
| qualcomm | snapdragon_888_5g_mobile | * | any |
| qualcomm | snapdragon_888\+_5g_mobile_firmware | * | any |
| qualcomm | snapdragon_888\+_5g_mobile | * | any |
| qualcomm | snapdragon_ar1_gen_1_firmware | * | any |
| qualcomm | snapdragon_ar1_gen_1 | * | any |
| qualcomm | snapdragon_ar2_gen_1_firmware | * | any |
| qualcomm | snapdragon_ar2_gen_1 | * | any |
| qualcomm | snapdragon_auto_5g_modem-rf_firmware | * | any |
| qualcomm | snapdragon_auto_5g_modem-rf | * | any |
| qualcomm | snapdragon_w5\+_gen_1_wearable_firmware | * | any |
| qualcomm | snapdragon_w5\+_gen_1_wearable | * | any |
| qualcomm | snapdragon_x12_lte_modem_firmware | * | any |
| qualcomm | snapdragon_x12_lte_modem | * | any |
| qualcomm | snapdragon_x62_5g_modem-rf_firmware | * | any |
| qualcomm | snapdragon_x62_5g_modem-rf | * | any |
| qualcomm | snapdragon_x65_5g_modem-rf_firmware | * | any |
| qualcomm | snapdragon_x65_5g_modem-rf | * | any |
| qualcomm | ssg2115p_firmware | * | any |
| qualcomm | ssg2115p | * | any |
| qualcomm | ssg2125p_firmware | * | any |
| qualcomm | ssg2125p | * | any |
| qualcomm | sw5100_firmware | * | any |
| qualcomm | sw5100 | * | any |
| qualcomm | sw5100p_firmware | * | any |
| qualcomm | sw5100p | * | any |
| qualcomm | sxr1230p_firmware | * | any |
| qualcomm | sxr1230p | * | any |
| qualcomm | sxr2230p_firmware | * | any |
| qualcomm | sxr2230p | * | any |
| qualcomm | sxr2250p_firmware | * | any |
| qualcomm | sxr2250p | * | any |
| qualcomm | sxr2330p_firmware | * | any |
| qualcomm | sxr2330p | * | any |
| qualcomm | talynplus_firmware | * | any |
| qualcomm | talynplus | * | any |
| qualcomm | vision_intelligence_400_firmware | * | any |
| qualcomm | vision_intelligence_400 | * | any |
| qualcomm | wcd9335_firmware | * | any |
| qualcomm | wcd9335 | * | any |
| qualcomm | wcd9341_firmware | * | any |
| qualcomm | wcd9341 | * | any |
| qualcomm | wcd9370_firmware | * | any |
| qualcomm | wcd9370 | * | any |
| qualcomm | wcd9375_firmware | * | any |
| qualcomm | wcd9375 | * | any |
| qualcomm | wcd9378_firmware | * | any |
| qualcomm | wcd9378 | * | any |
References 1
- docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html
Remediation
- docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html