CVEvulnerability

CVE-2025-21486

7.8 HIGH Published 2025-06-03 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-06-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-822

Description

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

Affected configurations

• qualcomm fastconnect 6900 firmware • qualcomm fastconnect 7800 firmware • qualcomm qmp1000 firmware • qualcomm sm8735 firmware • qualcomm sm8750 firmware • qualcomm sm8750p firmware • qualcomm snapdragon w5\+ gen 1 wearable platform firmware • qualcomm sw5100 firmware • qualcomm sw5100p firmware • qualcomm sxr2230p firmware • qualcomm sxr2250p firmware • qualcomm sxr2330p firmware • qualcomm wcd9378 firmware • qualcomm wcd9380 firmware • qualcomm wcd9385 firmware • qualcomm wcd9395 firmware • qualcomm wcn3660b firmware • qualcomm wcn3680b firmware • qualcomm wcn3980 firmware • qualcomm wcn3988 firmware • qualcomm wcn7750 firmware • qualcomm wcn7860 firmware • qualcomm wcn7861 firmware • qualcomm wcn7880 firmware • qualcomm wcn7881 firmware • qualcomm wsa8830 firmware • qualcomm wsa8832 firmware • qualcomm wsa8835 firmware • qualcomm wsa8840 firmware • qualcomm wsa8845 firmware • qualcomm wsa8845h firmware

Related

Weakness · CWE (1)

  • CWE-822 Untrusted Pointer Dereference weakness

References