PT-2025-19877 · Qualcomm · Snapdragon+29

Published 2025-05-06 · Updated 2025-05-07 · CVE-2025-21460

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The issue involves memory corruption that occurs during the processing of a message. This happens when the buffer is controlled by a Guest VM, allowing the value to be changed continuously.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

RCE

Weakness Enumeration

CWE-787

CWE-20

Related Identifiers

CVE-2025-21460

Affected Products

Snapdragon

Qam8255P Firmware

Qam8295P Firmware

Qam8620P Firmware

Qam8650P Firmware

Qam8775P Firmware

Qamsrv1H Firmware

Qca6574Au Firmware

Qca6595Au Firmware

Qca6688Aq Firmware

Qca6696 Firmware

Qca6698Aq Firmware

Sa6145P Firmware

Sa6150P Firmware

Sa6155P Firmware

Sa7255P Firmware

Sa7775P Firmware

Sa8145P Firmware

Sa8150P Firmware

Sa8155P Firmware

Sa8195P Firmware

Sa8255P Firmware

Sa8295P Firmware

Sa8540P Firmware

Sa8620P Firmware

Sa8650P Firmware

Sa8770P Firmware

Sa8775P Firmware

Sa9000P Firmware

Srv1H Firmware

References · 7

• https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21460 · Security Note
• https://twitter.com/cybercronai/status/1919965812137349516 · Twitter Post
• https://t.me/cvetracker/23137 · Telegram Post
• https://t.me/cvedetector/24581 · Telegram Post
• https://twitter.com/CVEnew/status/1919678277192720455 · Twitter Post
• https://twitter.com/xvonfers/status/1919854218451521983 · Twitter Post