We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-21485

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service



Description

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.

Reserved 2024-12-18 | Published 2025-06-03 | Updated 2025-06-04 | Assigner qualcomm


HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

Product status

Default status
unaffected

FastConnect 6900
affected

FastConnect 7800
affected

QMP1000
affected

SM8735
affected

SM8750
affected

SM8750P
affected

Snapdragon 8 Gen 3 Mobile Platform
affected

Snapdragon W5+ Gen 1 Wearable Platform
affected

SW5100
affected

SW5100P
affected

SXR2230P
affected

SXR2250P
affected

SXR2330P
affected

WCD9378
affected

WCD9380
affected

WCD9385
affected

WCD9390
affected

WCD9395
affected

WCN7750
affected

WCN7860
affected

WCN7861
affected

WCN7880
affected

WCN7881
affected

WSA8830
affected

WSA8832
affected

WSA8835
affected

WSA8840
affected

WSA8845
affected

WSA8845H
affected

References

docs.qualcomm.com/...ecuritybulletin/june-2025-bulletin.html

cve.org (CVE-2025-21485)

nvd.nist.gov (CVE-2025-21485)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-21485

Support options

Helpdesk Chat, Email, Knowledgebase