CVEvulnerability

CVE-2025-21457

6.1 MEDIUM Published 2025-08-06 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-08-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Weaknesses
CWE-126

Description

Information disclosure while opening a fastrpc session when domain is not sanitized.

Affected configurations

• qualcomm ar8035 firmware • qualcomm fastconnect 7800 firmware • qualcomm qca6584au firmware • qualcomm qca6698aq firmware • qualcomm qca8081 firmware • qualcomm qca8337 firmware • qualcomm qcc710 firmware • qualcomm qcn6224 firmware • qualcomm qcn6274 firmware • qualcomm qfw7114 firmware • qualcomm qfw7124 firmware • qualcomm snapdragon auto 5g modem-rf gen 2 firmware • qualcomm snapdragon x72 5g modem-rf system firmware • qualcomm snapdragon x75 5g modem-rf system firmware • qualcomm wcd9340 firmware

Related

Weakness · CWE (1)

  • CWE-126 Buffer Over-read weakness

References