CVE-2025-21458

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.

Score

CVSS 3.1 7.8 High

Status

Analyzed - product-security@qualcomm.com

Published

2025-08-06

Last modified

2026-02-26

Weaknesses

CWE-416

Affected products

• Fastconnect 6900 Firmware (Qualcomm)
• Qam8255p Firmware (Qualcomm)
• Qam8650p Firmware (Qualcomm)
• Qam8775p Firmware (Qualcomm)
• Qca6174a Firmware (Qualcomm)
• Qca6698aq Firmware (Qualcomm)
• Qca6797aq Firmware (Qualcomm)
• Sa7255p Firmware (Qualcomm)
• Sa7775p Firmware (Qualcomm)
• Sa8255p Firmware (Qualcomm)
• Sa8620p Firmware (Qualcomm)
• Sa8650p Firmware (Qualcomm)
• Sa8775p Firmware (Qualcomm)
• Sa9000p Firmware (Qualcomm)
• Snapdragon 888+ 5g Mobile Platform (sm8350-ac) Firmware (Qualcomm)
• Snapdragon 888 5g Mobile Platform Firmware (Qualcomm)
• Sw5100 Firmware (Qualcomm)
• Sw5100p Firmware (Qualcomm)
• Wcd9380 Firmware (Qualcomm)
• Wcd9385 Firmware (Qualcomm)
• Wcn3980 Firmware (Qualcomm)
• Wcn3988 Firmware (Qualcomm)
• Wsa8830 Firmware (Qualcomm)
• Wsa8835 Firmware (Qualcomm)
• Snapdragon (Qualcomm Inc.)

References

• https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html