CVE-2025-21488CWE-126

CVE-2025-21488

High · published September 24, 2025

CVSS v3.1
8.2
EPSS
0%
Percentile
17.4
In the wild
Unconfirmed
What it is

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00265 · 17.4th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2025-09-24T20:15Z
Affected products (108)
ProductVersionsFixed in
qualcomm/fastconnect_6200_firmwareall versions—
qualcomm/fastconnect_6700_firmwareall versions—
qualcomm/fastconnect_6900_firmwareall versions—
qualcomm/fastconnect_7800_firmwareall versions—
qualcomm/msm8996au_firmwareall versions—
qualcomm/qca6564_firmwareall versions—
qualcomm/qca6564a_firmwareall versions—
qualcomm/qca6564au_firmwareall versions—
qualcomm/qca6574_firmwareall versions—
qualcomm/qca6574a_firmwareall versions—
qualcomm/qca6574au_firmwareall versions—
qualcomm/qca6595au_firmwareall versions—
qualcomm/qca6696_firmwareall versions—
qualcomm/qcm4490_firmwareall versions—
qualcomm/qcs410_firmwareall versions—
qualcomm/qcs4490_firmwareall versions—
qualcomm/qcs610_firmwareall versions—
qualcomm/qmp1000_firmwareall versions—
qualcomm/video_collaboration_vc1_platform_firmwareall versions—
qualcomm/video_collaboration_vc3_platform_firmwareall versions—
qualcomm/sa6145p_firmwareall versions—
qualcomm/sa6155_firmwareall versions—
qualcomm/sa6155p_firmwareall versions—
qualcomm/sa8155_firmwareall versions—
qualcomm/sa8155p_firmwareall versions—
qualcomm/sd_8_gen1_5g_firmwareall versions—
qualcomm/sd660_firmwareall versions—
qualcomm/sd670_firmwareall versions—
qualcomm/sd865_5g_firmwareall versions—
qualcomm/sdm429w_firmwareall versions—
qualcomm/sg4150p_firmwareall versions—
qualcomm/sm4125_firmwareall versions—
qualcomm/sm4635_firmwareall versions—
qualcomm/sm6370_firmwareall versions—
qualcomm/sm6650_firmwareall versions—
qualcomm/sm7635_firmwareall versions—
qualcomm/sm7675_firmwareall versions—
qualcomm/sm7675p_firmwareall versions—
qualcomm/sm8550p_firmwareall versions—
qualcomm/sm8635_firmwareall versions—
qualcomm/sm8635p_firmwareall versions—
qualcomm/sm8650q_firmwareall versions—
qualcomm/sm8735_firmwareall versions—
qualcomm/sm8750_firmwareall versions—
qualcomm/sm8750p_firmwareall versions—
qualcomm/snapdragon_4_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_4_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_429_mobile_platform_firmwareall versions—
qualcomm/snapdragon_460_mobile_platform_firmwareall versions—
qualcomm/snapdragon_480_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmwareall versions—
qualcomm/snapdragon_660_mobile_platform_firmwareall versions—
qualcomm/snapdragon_662_mobile_platform_firmwareall versions—
qualcomm/snapdragon_670_mobile_platform_firmwareall versions—
qualcomm/snapdragon_680_4g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmwareall versions—
qualcomm/snapdragon_695_5g_mobile_platform_firmwareall versions—
qualcomm/snapdragon_710_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8_gen_3_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8\+_gen_1_mobile_platform_firmwareall versions—
qualcomm/snapdragon_8\+_gen_2_mobile_platform_firmwareall versions—
qualcomm/snapdragon_820_automotive_platform_firmwareall versions—
qualcomm/snapdragon_845_mobile_platform_firmwareall versions—
qualcomm/snapdragon_w5\+_gen_1_wearable_platform_firmwareall versions—
qualcomm/snapdragon_xr1_platform_firmwareall versions—
qualcomm/snapdragon_xr2_5g_platform_firmwareall versions—
qualcomm/snapdragon_xr2\+_gen_1_platform_firmwareall versions—
qualcomm/sw5100_firmwareall versions—
qualcomm/sw5100p_firmwareall versions—
qualcomm/sxr1120_firmwareall versions—
qualcomm/talynplus_firmwareall versions—
qualcomm/wcd9326_firmwareall versions—
qualcomm/wcd9335_firmwareall versions—
qualcomm/wcd9340_firmwareall versions—
qualcomm/wcd9341_firmwareall versions—
qualcomm/wcd9370_firmwareall versions—
qualcomm/wcd9375_firmwareall versions—
qualcomm/wcd9378_firmwareall versions—
qualcomm/wcd9380_firmwareall versions—
qualcomm/wcd9385_firmwareall versions—
qualcomm/wcd9390_firmwareall versions—
qualcomm/wcd9395_firmwareall versions—
qualcomm/wcn3620_firmwareall versions—
qualcomm/wcn3660b_firmwareall versions—
qualcomm/wcn3910_firmwareall versions—
qualcomm/wcn3950_firmwareall versions—
qualcomm/wcn3980_firmwareall versions—
qualcomm/wcn3988_firmwareall versions—
qualcomm/wcn3990_firmwareall versions—
qualcomm/wcn6450_firmwareall versions—
qualcomm/wcn6650_firmwareall versions—
qualcomm/wcn6740_firmwareall versions—
qualcomm/wcn6755_firmwareall versions—
qualcomm/wcn7750_firmwareall versions—
qualcomm/wcn7860_firmwareall versions—
qualcomm/wcn7861_firmwareall versions—
qualcomm/wcn7880_firmwareall versions—
qualcomm/wcn7881_firmwareall versions—
qualcomm/wsa8810_firmwareall versions—
qualcomm/wsa8815_firmwareall versions—
qualcomm/wsa8830_firmwareall versions—
qualcomm/wsa8832_firmwareall versions—
qualcomm/wsa8835_firmwareall versions—
qualcomm/wsa8840_firmwareall versions—
qualcomm/wsa8845_firmwareall versions—
qualcomm/wsa8845h_firmwareall versions—
References (1)
https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html · [email protected]
EPSS history
Timeline
  • 24 SEP 15:33Z
    Buffer Over-read in Data Network Stack & Connectivity
    cvelistv5