CVE-2025-21439

Published Apr 7, 2025

Last updated 9 months ago

Overview

Description
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.
Source
product-security@qualcomm.com
NVD status
Analyzed
Products
fastconnect_6700_firmware, fastconnect_6900_firmware, qca6595au_firmware, qcm5430_firmware, qcm6490_firmware, qcn7605_firmware, qcn7606_firmware, qcs5430_firmware, qcs6490_firmware, video_collaboration_vc3_platform_firmware, sc8180x\+sdx55_firmware, snapdragon_8c_compute_platform_\(sc8180x-ad\)_firmware, snapdragon_8c_compute_platform_\(sc8180xp-ad\)_firmware, snapdragon_8cx_compute_platform_\(sc8180x-aa\)_firmware, snapdragon_8cx_compute_platform_\(sc8180x-ab\)_firmware, snapdragon_8cx_compute_platform_\(sc8180xp-ac\)_firmware, snapdragon_8cx_compute_platform_\(sc8180xp-af\)_firmware, snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\)_firmware, snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-af\)_firmware, snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\)_firmware, snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-ab\)_firmware, wcd9370_firmware, wcd9375_firmware, wcd9380_firmware, wcd9385_firmware

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.8
Impact score
5.9
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

product-security@qualcomm.com
CWE-787

Social media

Hype score
Not currently trending

Configurations