Read the docs
TI-2025-15392 Aliases CVE-2025-21428GHSA-4rmv-m7cx-wvg4

Buffer Over-read in WLAN Host

Priority MEDIUM 40CWE-126Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-126 and the CVSS impact.

Summary

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00263 18th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QualcommSnapdragon9206 LTE Modem; APQ8017; AR8031; C-V2X 9150; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6900; MDM9250; MDM9628; MDM9640; MDM9650; MSM8996AU; QCA6174; QCA6174A; QCA6175A; QCA6554A; QCA6564A; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6584; QCA6584AU; QCA6595; QCA6595AU; QCA6696; QCA9367; QCA9377; QCA9379; QCM2150; QEP8111; Qualcomm 205 Mobile Platform; Qualcomm 215 Mobile Platform; SA2150P; SD626; SDM429W; Smart Audio 200 Platform; Smart Audio 400 Platform; Smart Display 200 Platform (APQ5053-AA); Snapdragon 1200 Wearable Platform; Snapdragon 210 Processor; Snapdragon 212 Mobile Platform; Snapdragon 425 Mobile Platform; Snapdragon 429 Mobile Platform; Snapdragon 439 Mobile Platform; Snapdragon 625 Mobile Platform; Snapdragon 626 Mobile Platform; Snapdragon 632 Mobile Platform; Snapdragon 820 Automotive Platform; Snapdragon Auto 5G Modem-RF; Snapdragon X12 LTE Modem; Snapdragon X35 5G Modem-RF System; Snapdragon X5 LTE Modem; Vision Intelligence 100 Platform (APQ8053-AA); Vision Intelligence 200 Platform (APQ8053-AC); WCD9326; WCD9330; WCD9335; WCD9340; WCN3610; WCN3615; WCN3620; WCN3660B; WCN3680; WCN3680B; WCN3980; WSA8810; WSA8815—No fix listedCNA
  • Snapdragon VendorQualcomm Affected 9206 LTE Modem; APQ8017; AR8031; C-V2X 9150; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6900; MDM9250; MDM9628; MDM9640; MDM9650; MSM8996AU; QCA6174; QCA6174A; QCA6175A; QCA6554A; QCA6564A; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6584; QCA6584AU; QCA6595; QCA6595AU; QCA6696; QCA9367; QCA9377; QCA9379; QCM2150; QEP8111; Qualcomm 205 Mobile Platform; Qualcomm 215 Mobile Platform; SA2150P; SD626; SDM429W; Smart Audio 200 Platform; Smart Audio 400 Platform; Smart Display 200 Platform (APQ5053-AA); Snapdragon 1200 Wearable Platform; Snapdragon 210 Processor; Snapdragon 212 Mobile Platform; Snapdragon 425 Mobile Platform; Snapdragon 429 Mobile Platform; Snapdragon 439 Mobile Platform; Snapdragon 625 Mobile Platform; Snapdragon 626 Mobile Platform; Snapdragon 632 Mobile Platform; Snapdragon 820 Automotive Platform; Snapdragon Auto 5G Modem-RF; Snapdragon X12 LTE Modem; Snapdragon X35 5G Modem-RF System; Snapdragon X5 LTE Modem; Vision Intelligence 100 Platform (APQ8053-AA); Vision Intelligence 200 Platform (APQ8053-AC); WCD9326; WCD9330; WCD9335; WCD9340; WCN3610; WCN3615; WCN3620; WCN3660B; WCN3680; WCN3680B; WCN3980; WSA8810; WSA8815 Fixed in — No fix listed CNA

CPE configurations NVD · 138

CPEVersionsRoleVendor
cpe:2.3:o:qualcomm:snapdragon_439_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_439_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_625_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_625_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_626_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_626_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_632_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_632_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_820_automotive_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_820_automotive_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
  • cpe:2.3:o:qualcomm:snapdragon_439_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_439_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_625_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_625_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_626_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_626_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_632_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_632_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_820_automotive_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_820_automotive_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
Show 128 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_x12_lte_modem_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_x12_lte_modem:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_x35_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_x35_5g_modem-rf_system:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_x5_lte_modem_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_x5_lte_modem:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:vision_intelligence_100_platform_\(apq8053-aa\)_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:vision_intelligence_100_platform_\(apq8053-aa\):-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:vision_intelligence_200_platform_\(apq8053-ac\)_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:vision_intelligence_200_platform_\(apq8053-ac\):-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9326:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9330_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9330:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3610:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3615:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3680_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3680:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:9206_lte_modem_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:9206_lte_modem:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:c-v2x_9150_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:c-v2x_9150:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:fastconnect_6200:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:mdm9250_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:mdm9250:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:mdm9628_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:mdm9628:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6174_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6174:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6175a_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6175a:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6554a_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6554a:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6584_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6584:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca9367_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca9367:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca9379:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qcm2150_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qcm2150:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qep8111_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qep8111:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qualcomm_205_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qualcomm_205_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qualcomm_215_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qualcomm_215_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sa2150p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sa2150p:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sd626_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sd626:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:smart_audio_200_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:smart_audio_200_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:smart_audio_400_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:smart_audio_400_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:smart_display_200_platform_\(apq5053-aa\)_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:smart_display_200_platform_\(apq5053-aa\):-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_1200_wearable_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_1200_wearable_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_210_processor_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_210_processor:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_212_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_212_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_425_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_425_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_429_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
  • cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_x12_lte_modem_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_x12_lte_modem:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_x35_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_x35_5g_modem-rf_system:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_x5_lte_modem_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_x5_lte_modem:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:vision_intelligence_100_platform_\(apq8053-aa\)_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:vision_intelligence_100_platform_\(apq8053-aa\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:vision_intelligence_200_platform_\(apq8053-ac\)_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:vision_intelligence_200_platform_\(apq8053-ac\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9326:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9330_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3610:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3615:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3680_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3680:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:9206_lte_modem_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:9206_lte_modem:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:c-v2x_9150_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:c-v2x_9150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:fastconnect_6200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:mdm9250_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:mdm9250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:mdm9628_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:mdm9628:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6174_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6174:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6175a_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6175a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6554a_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6554a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6584_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6584:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca9367_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca9367:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca9379:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qcm2150_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qcm2150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qep8111_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qep8111:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qualcomm_205_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qualcomm_205_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qualcomm_215_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qualcomm_215_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sa2150p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sa2150p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sd626_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sd626:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:smart_audio_200_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:smart_audio_200_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:smart_audio_400_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:smart_audio_400_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:smart_display_200_platform_\(apq5053-aa\)_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:smart_display_200_platform_\(apq5053-aa\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_1200_wearable_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_1200_wearable_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_210_processor_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_210_processor:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_212_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_212_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_425_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_425_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_429_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-21428
  2. 2026-10-03 Alias added: GHSA-4rmv-m7cx-wvg4

References

  • TI-2023-08648 Use of Out-of-range Pointer Offset in Multi-mode Call Processor CVSS 3.1CRITICAL 9.8
  • TI-2023-23308 Improper Authentication in Multi-Mode Call Processor CVSS 3.1CRITICAL 9.1
  • TI-2023-08645 Buffer Over-read in Data Modem CVSS 3.1CRITICAL 9.8
  • TI-2022-19222 Buffer over-read in Modem CVSS 3.1HIGH 8.2
  • TI-2022-14713 Buffer over-read in Modem CVSS 3.1HIGH 8.2
  • TI-2022-14709 Buffer over-read in Modem CVSS 3.1HIGH 8.2
See all 45 →

Sources