PT-2025-15212 · Qualcomm · Snapdragon+16

Published 2025-04-07 · Updated 2025-10-06 · CVE-2025-21439

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-21439

Affected Products

Snapdragon

Fastconnect 6700 Firmware

Fastconnect 6900 Firmware

Qca6595Au Firmware

Qcs5430 Firmware

Qcs6490 Firmware

Qcn7605 Firmware

Qcn7606 Firmware

Sc8180X+Sdx55 Firmware

Snapdragon 8C Compute Platform (Sc8180X-Ad) Firmware

Snapdragon 8Cx Gen 2 5G Compute Platform (Sc8180X-Ac) Firmware

Snapdragon 8Cx Gen 2 5G Compute Platform (Sc8180Xp-Aa

Video Collaboration Vc3 Platform Firmware

Wcd9370 Firmware

Wcd9375 Firmware

Wcd9380 Firmware

Wcd9385 Firmware

References · 8

• https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21439 · Security Note
• https://t.me/latest_high_impact_cve/2105 · Telegram Post
• https://t.me/cvedetector/22290 · Telegram Post
• https://twitter.com/cybercronai/status/1909558205459427531 · Twitter Post
• https://t.me/cveNotify/137568 · Telegram Post
• https://t.me/cvetracker/20986 · Telegram Post
• https://twitter.com/CVEnew/status/1909194590151655488 · Twitter Post