CVE-2025-21468

Description

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.

Reserved 2024-12-18 | Published 2025-05-06 | Updated 2025-05-07 | Assigner qualcomm

Problem types

CWE-787: Out-of-bounds Write

Product status

Default status
unaffected

AR8035
affected

CSRA6620
affected

CSRA6640
affected

FastConnect 6200
affected

FastConnect 6700
affected

FastConnect 6900
affected

FastConnect 7800
affected

Flight RB5 5G Platform
affected

MDM9628
affected

QAM8295P
affected

QCA6174A
affected

QCA6391
affected

QCA6564A
affected

QCA6564AU
affected

QCA6574
affected

QCA6574A
affected

QCA6574AU
affected

QCA6595
affected

QCA6595AU
affected

QCA6696
affected

QCA6698AQ
affected

QCA8081
affected

QCA8337
affected

QCA9377
affected

QCM4490
affected

QCM5430
affected

QCM6490
affected

QCM8550
affected

QCN6024
affected

QCN9011
affected

QCN9012
affected

QCN9024
affected

QCN9274
affected

QCS410
affected

QCS4490
affected

QCS5430
affected

QCS610
affected

QCS615
affected

QCS6490
affected

QCS7230
affected

QCS8250
affected

QCS8300
affected

QCS8550
affected

QCS9100
affected

QMP1000
affected

QRB5165M
affected

QRB5165N
affected

QSM8350
affected

Qualcomm Video Collaboration VC1 Platform
affected

Qualcomm Video Collaboration VC3 Platform
affected

Qualcomm Video Collaboration VC5 Platform
affected

Robotics RB2 Platform
affected

Robotics RB5 Platform
affected

SA4150P
affected

SA4155P
affected

SA6145P
affected

SA6150P
affected

SA6155P
affected

SA8145P
affected

SA8150P
affected

SA8155P
affected

SA8195P
affected

SA8295P
affected

SA8530P
affected

SA8540P
affected

SA9000P
affected

SD 8 Gen1 5G
affected

SD888
affected

SDX61
affected

SG8275P
affected

SM6370
affected

SM6650
affected

SM6650P
affected

SM7315
affected

SM7325P
affected

SM7635
affected

SM7675
affected

SM7675P
affected

SM8550P
affected

SM8635
affected

SM8635P
affected

SM8650Q
affected

SM8735
affected

SM8750
affected

SM8750P
affected

Smart Audio 400 Platform
affected

Snapdragon 4 Gen 1 Mobile Platform
affected

Snapdragon 4 Gen 2 Mobile Platform
affected

Snapdragon 480 5G Mobile Platform
affected

Snapdragon 480+ 5G Mobile Platform (SM4350-AC)
affected

Snapdragon 695 5G Mobile Platform
affected

Snapdragon 778G 5G Mobile Platform
affected

Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)
affected

Snapdragon 780G 5G Mobile Platform
affected

Snapdragon 782G Mobile Platform (SM7325-AF)
affected

Snapdragon 7c+ Gen 3 Compute
affected

Snapdragon 8 Gen 1 Mobile Platform
affected

Snapdragon 8 Gen 2 Mobile Platform
affected

Snapdragon 8 Gen 3 Mobile Platform
affected

Snapdragon 8+ Gen 1 Mobile Platform
affected

Snapdragon 8+ Gen 2 Mobile Platform
affected

Snapdragon 888 5G Mobile Platform
affected

Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
affected

Snapdragon AR1 Gen 1 Platform
affected

Snapdragon AR1 Gen 1 Platform "Luna1"
affected

Snapdragon AR2 Gen 1 Platform
affected

Snapdragon Auto 5G Modem-RF
affected

Snapdragon W5+ Gen 1 Wearable Platform
affected

Snapdragon X12 LTE Modem
affected

Snapdragon X62 5G Modem-RF System
affected

Snapdragon X65 5G Modem-RF System
affected

SSG2115P
affected

SSG2125P
affected

SW5100
affected

SW5100P
affected

SXR1230P
affected

SXR2230P
affected

SXR2250P
affected

SXR2330P
affected

TalynPlus
affected

Vision Intelligence 400 Platform
affected

WCD9335
affected

WCD9341
affected

WCD9370
affected

WCD9375
affected

WCD9378
affected

WCD9380
affected

WCD9385
affected

WCD9390
affected

WCD9395
affected

WCN3910
affected

WCN3950
affected

WCN3980
affected

WCN3988
affected

WCN3990
affected

WCN6450
affected

WCN6650
affected

WCN6740
affected

WCN6755
affected

WCN7750
affected

WCN7860
affected

WCN7861
affected

WCN7880
affected

WCN7881
affected

WSA8810
affected

WSA8815
affected

WSA8830
affected

WSA8832
affected

WSA8835
affected

WSA8840
affected

WSA8845
affected

WSA8845H
affected

References

docs.qualcomm.com/...securitybulletin/may-2025-bulletin.html

cve.org (CVE-2025-21468)

nvd.nist.gov (CVE-2025-21468)

Download JSON