CVE-2025-21476

HIGH EPSS 0.3%
Published Sep 24, 20259mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Sep 24, 2025 9mo ago
Last Modified Jun 17, 2026 1w ago

Description

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
0.3% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-120

Affected Products 84

VendorProductVersionRange
qualcommqcs6490_firmware*any
qualcommqcs6490*any
qualcommqcs8550_firmware*any
qualcommqcs8550*any
qualcommqcs9100_firmware*any
qualcommqcs9100*any
qualcommsg8275_firmware*any
qualcommsg8275*any
qualcommsg8275p_firmware*any
qualcommsg8275p*any
qualcommsm6650_firmware*any
qualcommsm6650*any
qualcommsm7635_firmware*any
qualcommsm7635*any
qualcommsm7675_firmware*any
qualcommsm7675*any
qualcommsm7675p_firmware*any
qualcommsm7675p*any
qualcommsm8550_firmware*any
qualcommsm8550*any
qualcommsm8550p_firmware*any
qualcommsm8550p*any
qualcommsm8635_firmware*any
qualcommsm8635*any
qualcommsm8635p_firmware*any
qualcommsm8635p*any
qualcommsm8650_firmware*any
qualcommsm8650*any
qualcommsm8650p_firmware*any
qualcommsm8650p*any
qualcommsm8650q_firmware*any
qualcommsm8650q*any
qualcommsm8750_firmware*any
qualcommsm8750*any
qualcommsm8750p_firmware*any
qualcommsm8750p*any
qualcommsxr2330p_firmware*any
qualcommsxr2330p*any
qualcommqca6391_firmware*any
qualcommqca6391*any
qualcommqca6698aq_firmware*any
qualcommqca6698aq*any
qualcommqcn9011_firmware*any
qualcommqcn9011*any
qualcommqcn9012_firmware*any
qualcommqcn9012*any
qualcommqcn9274_firmware*any
qualcommqcn9274*any
qualcommwcn3910_firmware*any
qualcommwcn3910*any
qualcommwcn3950_firmware*any
qualcommwcn3950*any
qualcommwcn6650_firmware*any
qualcommwcn6650*any
qualcommwcn6750_firmware*any
qualcommwcn6750*any
qualcommwcn6755_firmware*any
qualcommwcn6755*any
qualcommwcn6855_firmware*any
qualcommwcn6855*any
qualcommwcn6856_firmware*any
qualcommwcn6856*any
qualcommwcn7850_firmware*any
qualcommwcn7850*any
qualcommwcn7851_firmware*any
qualcommwcn7851*any
qualcommwcn7860_firmware*any
qualcommwcn7860*any
qualcommwcn7861_firmware*any
qualcommwcn7861*any
qualcommwcn7880_firmware*any
qualcommwcn7880*any
qualcommwcn7881_firmware*any
qualcommwcn7881*any
qualcommqcm5430_firmware*any
qualcommqcm5430*any
qualcommqcm6490_firmware*any
qualcommqcm6490*any
qualcommqcm8550_firmware*any
qualcommqcm8550*any
qualcommqcs5430_firmware*any
qualcommqcs5430*any
qualcommqcs615_firmware*any
qualcommqcs615*any

References 1

  • docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.