Home

Description

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

PUBLISHED Reserved 2024-12-18 | Published 2025-06-03 | Updated 2026-02-26 | Assigner qualcomm




HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-822 Untrusted Pointer Dereference

Product status

Default status
unaffected

FastConnect 6900
affected

FastConnect 7800
affected

QMP1000
affected

SM8735
affected

SM8750
affected

SM8750P
affected

Snapdragon W5+ Gen 1 Wearable Platform
affected

SW5100
affected

SW5100P
affected

SXR2230P
affected

SXR2250P
affected

SXR2330P
affected

WCD9378
affected

WCD9380
affected

WCD9385
affected

WCD9395
affected

WCN3660B
affected

WCN3680B
affected

WCN3980
affected

WCN3988
affected

WCN7750
affected

WCN7860
affected

WCN7861
affected

WCN7880
affected

WCN7881
affected

WSA8830
affected

WSA8832
affected

WSA8835
affected

WSA8840
affected

WSA8845
affected

WSA8845H
affected

References

docs.qualcomm.com/...ecuritybulletin/june-2025-bulletin.html

cve.org (CVE-2025-21486)

nvd.nist.gov (CVE-2025-21486)

Download JSON