PT-2025-39268 · Ue · Ue

Published 2025-09-24 · Updated 2026-02-10 · CVE-2025-21484

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions UE (affected versions not specified)

Description An information disclosure issue exists when a User Equipment (UE) receives an Real-time Transport Protocol (RTP) packet from the network and attempts to decode and reassemble fragments from that packet. The issue involves the handling of RTP packets during decoding and reassembly processes, potentially leading to unauthorized information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Over-read

Weakness Enumeration

CWE-126

Related Identifiers

CVE-2025-21484

Affected Products

Ue

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-21484 · Security Note
• https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html · Vendor Advisory
• https://twitter.com/DavidMarquet19/status/1980167170530168985 · Twitter Post
• https://t.me/cveNotify/151625 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1970987345814974702 · Twitter Post
• https://twitter.com/CVEnew/status/1970878572655980943 · Twitter Post
• https://t.me/cveNotify/136303 · Telegram Post
• https://twitter.com/cracbot/status/1972617425205277137 · Twitter Post
• https://t.me/cveNotify/144014 · Telegram Post