Skip to main content

Aqt1000 Firmware CVE-2025-21422

| EUVDEUVD-2025-20494 HIGH
Cryptographic Issues (CWE-310)
2025-07-08 product-security@qualcomm.com
Information Disclosure Qualcomm Aqt1000 Firmware Ar8035 Firmware Fastconnect 6200 Firmware Fastconnect 6700 Firmware Fastconnect 6800 Firmware Fastconnect 6900 Firmware Fastconnect 7800 Firmware Qam8255p Firmware Qam8295p Firmware Qam8620p Firmware Qam8650p Firmware Qam8775p Firmware Qamsrv1h Firmware Qamsrv1m Firmware Qca6174a Firmware Qca6310 Firmware Qca6335 Firmware Qca6391 Firmware Qca6420 Firmware Qca6421 Firmware Qca6426 Firmware Qca6430 Firmware Qca6431 Firmware Qca6436 Firmware Qca6564a Firmware Qca6564au Firmware Qca6574 Firmware Qca6574a Firmware Qca6574au Firmware Qca6584au Firmware Qca6595 Firmware Qca6595au Firmware Qca6678aq Firmware Qca6688aq Firmware Qca6696 Firmware Qca6698aq Firmware Qca6698au Firmware Qca6797aq Firmware Qca8081 Firmware Qca8337 Firmware Qca9377 Firmware Qcc710 Firmware Qcm4325 Firmware Qcm4490 Firmware Qcm5430 Firmware Qcm6490 Firmware Qcm8550 Firmware Qcn6024 Firmware Qcn6224 Firmware Qcn6274 Firmware Qcn9011 Firmware Qcn9012 Firmware Qcn9024 Firmware Qcn9274 Firmware Qcs4490 Firmware Qcs5430 Firmware Qcs615 Firmware Qcs6490 Firmware Qcs8300 Firmware Qcs8550 Firmware Qcs9100 Firmware Qdu1000 Firmware Qdu1010 Firmware Qdu1110 Firmware Qdu1210 Firmware Qdx1010 Firmware Qdx1011 Firmware Qep8111 Firmware Qfw7114 Firmware Qfw7124 Firmware Qmp1000 Firmware Qru1032 Firmware Qru1052 Firmware Qru1062 Firmware Qsm8350 Firmware Robotics Rb3 Firmware Sa4150p Firmware Sa4155p Firmware Sa6145p Firmware Sa6150p Firmware Sa6155 Firmware Sa6155p Firmware Sa7255p Firmware Sa7775p Firmware Sa8145p Firmware Sa8150p Firmware Sa8155 Firmware Sa8155p Firmware Sa8195p Firmware Sa8255p Firmware Sa8295p Firmware Sa8530p Firmware Sa8540p Firmware Sa8620p Firmware Sa8650p Firmware Sa8770p Firmware Sa8775p Firmware Sa9000p Firmware Sc8180x Aaab Firmware Sc8180x Acaf Firmware Sc8180x Ad Firmware Sc8180xp Aaab Firmware Sc8180xp Acaf Firmware Sc8180xp Ad Firmware Sc8280xp Abbb Firmware Sc8380xp Firmware Sd 675 Firmware Sd 8 Gen1 5g Firmware Sd 8cx Firmware Sd670 Firmware Sd675 Firmware Sd855 Firmware Sd865 5g Firmware Sdx55 Firmware Sdx57m Firmware Sdx61 Firmware Sdx80m Firmware Sg4150p Firmware Sg8275p Firmware Sm4635 Firmware Sm6650 Firmware Sm6650p Firmware Sm7250p Firmware Sm7635 Firmware Sm7635p Firmware Sm7675 Firmware Sm7675p Firmware Sm8550p Firmware Sm8635 Firmware Sm8635p Firmware Sm8650q Firmware Sm8735 Firmware Sm8750 Firmware Sm8750p Firmware Snapdragon 4 Gen 1 Mobile Firmware Snapdragon 4 Gen 2 Mobile Firmware Snapdragon 460 Mobile Firmware Snapdragon 480 5g Mobile Firmware Snapdragon 662 Mobile Firmware Snapdragon 670 Mobile Firmware Snapdragon 675 Mobile Firmware Snapdragon 678 Mobile Firmware Snapdragon 680 4g Mobile Firmware Snapdragon 685 4g Mobile Firmware Snapdragon 695 5g Mobile Firmware Snapdragon 765 5g Mobile Firmware Snapdragon 765g 5g Mobile Firmware Snapdragon 768g 5g Mobile Firmware Snapdragon 8 Gen 1 Mobile Firmware Snapdragon 8 Gen 2 Mobile Firmware Snapdragon 8 Gen 3 Mobile Firmware Snapdragon 845 Mobile Firmware Snapdragon 850 Mobile Compute Firmware Snapdragon 855 Mobile Firmware Snapdragon 860 Mobile Firmware Snapdragon 865 5g Mobile Firmware Snapdragon 870 5g Mobile Firmware Snapdragon 888 5g Mobile Firmware Snapdragon Ar1 Gen 1 Firmware Snapdragon Ar2 Gen 1 Firmware Snapdragon Auto 5g Modem Rf Gen 2 Firmware Snapdragon X24 Lte Modem Firmware Snapdragon X32 5g Modem Rf Firmware Snapdragon X35 5g Modem Rf Firmware Snapdragon X50 5g Modem Rf Firmware Snapdragon X55 5g Modem Rf Firmware Snapdragon X62 5g Modem Rf Firmware Snapdragon X65 5g Modem Rf Firmware Snapdragon X72 5g Modem Rf Firmware Snapdragon X75 5g Modem Rf Firmware Snapdragon Xr2 5g Firmware Srv1h Firmware Srv1l Firmware Srv1m Firmware Ssg2115p Firmware Ssg2125p Firmware Sxr1230p Firmware Sxr2130 Firmware Sxr2230p Firmware Sxr2250p Firmware Sxr2330p Firmware Talynplus Firmware Video Collaboration Vc3 Platform Firmware Vision Intelligence 300 Firmware Vision Intelligence 400 Firmware Wcd9326 Firmware Wcd9340 Firmware Wcd9341 Firmware Wcd9370 Firmware Wcd9375 Firmware Wcd9378 Firmware Wcd9380 Firmware Wcd9385 Firmware Wcd9390 Firmware Wcd9395 Firmware Wcn3950 Firmware Wcn3980 Firmware Wcn3988 Firmware Wcn3990 Firmware Wcn6450 Firmware Wcn6650 Firmware Wcn6755 Firmware Wcn7750 Firmware Wcn7860 Firmware Wcn7861 Firmware Wcn7880 Firmware Wcn7881 Firmware Wsa8810 Firmware Wsa8815 Firmware Wsa8830 Firmware Wsa8832 Firmware Wsa8835 Firmware Wsa8840 Firmware Wsa8845 Firmware Wsa8845h Firmware
7.1
CVSS 3.1 · NVD
View

Vulnerability Assessment

Weakness
CWE
CWE-310
OWASP Top 10:2025
A04:2025 - Cryptographic Failures
ASVS 5.0
V11 - Cryptography Cryptographic controls
Impact

CVSS score of 7.1 (HIGH).
This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).
No patch listed yet 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 16, 2026

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.

Earlier versions of this analysis (1)
v1 Mar 16, 2026 - 04:21 CVSS 7.1

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

Affected VersionsENISA

Snapdragon SA4155P
Snapdragon SRV1H
Snapdragon SA8540P
Snapdragon TalynPlus
Snapdragon Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro"
Snapdragon WCD9395
Snapdragon SM6650P
Snapdragon QCA6797AQ
Snapdragon SD 675
Snapdragon Snapdragon AR2 Gen 1 Platform
Snapdragon SM8635
Snapdragon QCA6430
Snapdragon QCA6426
Snapdragon Snapdragon XR2 5G Platform
Snapdragon WCN7860
Snapdragon SA7255P
Snapdragon WCD9390
Snapdragon QCA6574
Snapdragon SM7250P
Snapdragon SA8295P
Snapdragon SXR1230P
Snapdragon WCD9341
Snapdragon Snapdragon Auto 5G Modem-RF Gen 2
Snapdragon QAM8255P
Snapdragon QDX1011
Snapdragon FastConnect 6800
Snapdragon QCS8300
Snapdragon QAM8650P
Snapdragon Snapdragon 765 5G Mobile Platform (SM7250-AA)
Snapdragon QAMSRV1M
Snapdragon Vision Intelligence 300 Platform
Snapdragon QCA6574AU
Snapdragon QCC710
Snapdragon Snapdragon X75 5G Modem-RF System
Snapdragon QCA9377
Snapdragon SA8155
Snapdragon WCN7881
Snapdragon WSA8832
Snapdragon Vision Intelligence 400 Platform
Snapdragon QFW7114
Snapdragon Snapdragon AR1 Gen 1 Platform "Luna1"
Snapdragon SM7675P
Snapdragon WCN6650
Snapdragon SA8530P
Snapdragon Robotics RB3 Platform
Snapdragon Snapdragon 8cx Compute Platform (SC8180X-AA, AB)
Snapdragon SA8195P
Snapdragon QCS4490
Snapdragon SA6155
Snapdragon Snapdragon 765G 5G Mobile Platform (SM7250-AB)
Snapdragon QAMSRV1H
Snapdragon QCM5430
Snapdragon SA7775P
Snapdragon FastConnect 6200
Snapdragon SM7675
Snapdragon QCM8550
Snapdragon QCA6420
Snapdragon SA8775P
Snapdragon Snapdragon 8+ Gen 1 Mobile Platform
Snapdragon SA6150P
Snapdragon QEP8111
Snapdragon SDX57M
Snapdragon Snapdragon 855 Mobile Platform
Snapdragon QAM8295P
Snapdragon QCN6274
Snapdragon Snapdragon X50 5G Modem-RF System
Snapdragon WCN3990
Snapdragon SG8275P
Snapdragon Snapdragon 870 5G Mobile Platform (SM8250-AC)
Snapdragon WCD9370
Snapdragon WSA8810
Snapdragon SA8150P
Snapdragon Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite"
Snapdragon QCA6698AU
Snapdragon SM8735
Snapdragon SM8750P
Snapdragon QCA6431
Snapdragon QCA6421
Snapdragon SA4150P
Snapdragon QCS5430
Snapdragon SDX55
Snapdragon QCA8337
Snapdragon SD865 5G
Snapdragon Snapdragon AR1 Gen 1 Platform
Snapdragon Qualcomm Video Collaboration VC3 Platform
Snapdragon QRU1032
Snapdragon QAM8775P
Snapdragon SM8635P
Snapdragon SA8770P
Snapdragon QCA6564AU
Snapdragon WCD9340
Snapdragon WCN3980
Snapdragon QCN6024
Snapdragon WCD9380
Snapdragon SM6650
Snapdragon WSA8830
Snapdragon WSA8835
Snapdragon SDX61
Snapdragon Snapdragon 8 Gen 2 Mobile Platform
Snapdragon SXR2130
Snapdragon SA6145P
Snapdragon Snapdragon 695 5G Mobile Platform
Snapdragon Snapdragon 480+ 5G Mobile Platform (SM4350-AC)
Snapdragon AQT1000
Snapdragon SM7635P
Snapdragon QCM4490
Snapdragon QDU1210
Snapdragon QCA6310
Snapdragon WCN7861
Snapdragon Snapdragon X32 5G Modem-RF System
Snapdragon QCN9012
Snapdragon WCD9375
Snapdragon QCA8081
Snapdragon QCS615
Snapdragon SA9000P
Snapdragon QCA6678AQ
Snapdragon QCN9274
Snapdragon SRV1M
Snapdragon SD675
Snapdragon SXR2230P
Snapdragon WCD9385
Snapdragon QDU1000
Snapdragon QCA6436
Snapdragon Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB)
Snapdragon SA8145P
Snapdragon QCA6698AQ
Snapdragon FastConnect 6700
Snapdragon Snapdragon 662 Mobile Platform
Snapdragon SM8750
Snapdragon QCA6174A
Snapdragon QFW7124
Snapdragon SA8650P
Snapdragon QCS6490
Snapdragon WCD9326
Snapdragon Snapdragon 850 Mobile Compute Platform
Snapdragon QRU1062
Snapdragon FastConnect 6900
Snapdragon Snapdragon 680 4G Mobile Platform
Snapdragon QCS9100
Snapdragon Snapdragon X55 5G Modem-RF System
Snapdragon QCN9024
Snapdragon QCN9011
Snapdragon Snapdragon 8 Gen 1 Mobile Platform
Snapdragon QAM8620P
Snapdragon Snapdragon 865+ 5G Mobile Platform (SM8250-AB)
Snapdragon WSA8815
Snapdragon Snapdragon 480 5G Mobile Platform
Snapdragon QCS8550
Snapdragon SSG2115P
Snapdragon Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"
Snapdragon SA8255P
Snapdragon WSA8845
Snapdragon SD670
Snapdragon QCA6696
Snapdragon SG4150P
Snapdragon SRV1L
Snapdragon WCN7750
Snapdragon Snapdragon 460 Mobile Platform
Snapdragon QCA6584AU
Snapdragon WSA8840
Snapdragon SXR2250P
Snapdragon Snapdragon 685 4G Mobile Platform (SM6225-AD)
Snapdragon Snapdragon 4 Gen 2 Mobile Platform
Snapdragon SXR2330P
Snapdragon SM8550P
Snapdragon FastConnect 7800
Snapdragon SA8155P
Snapdragon Snapdragon 768G 5G Mobile Platform (SM7250-AC)
Snapdragon QDU1110
Snapdragon SM4635
Snapdragon Snapdragon X72 5G Modem-RF System
Snapdragon Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro"
Snapdragon Snapdragon 855+/860 Mobile Platform (SM8150-AC)
Snapdragon QCN6224
Snapdragon SM7635
Snapdragon Snapdragon 670 Mobile Platform
Snapdragon Snapdragon 845 Mobile Platform
Snapdragon Snapdragon X35 5G Modem-RF System
Snapdragon WCN6450
Snapdragon WCN7880
Snapdragon QCA6595
Snapdragon SC8380XP
Snapdragon Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
Snapdragon Snapdragon 678 Mobile Platform (SM6150-AC)
Snapdragon Snapdragon 4 Gen 1 Mobile Platform
Snapdragon SD 8 Gen1 5G
Snapdragon SDX80M
Snapdragon QCA6595AU
Snapdragon QCM6490
Snapdragon WCD9378
Snapdragon SA8620P
Snapdragon QDU1010
Snapdragon QCA6574A
Snapdragon QCA6688AQ
Snapdragon Snapdragon 865 5G Mobile Platform
Snapdragon QCM4325
Snapdragon SM8650Q
Snapdragon WSA8845H
Snapdragon SA6155P
Snapdragon Snapdragon X24 LTE Modem
Snapdragon QSM8350
Snapdragon QDX1010
Snapdragon QCA6564A
Snapdragon Snapdragon 8+ Gen 2 Mobile Platform
Snapdragon AR8035
Snapdragon QCA6391
Snapdragon WCN3988
Snapdragon WCN6755
Snapdragon SD 8CX
Snapdragon QRU1052
Snapdragon Snapdragon 675 Mobile Platform
Snapdragon Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)
Snapdragon Snapdragon 8 Gen 3 Mobile Platform
Snapdragon SD855
Snapdragon Snapdragon X62 5G Modem-RF System
Snapdragon SSG2125P
Snapdragon QMP1000
Snapdragon QCA6335
Snapdragon Snapdragon X65 5G Modem-RF System
Snapdragon WCN3950
Snapdragon Snapdragon 888 5G Mobile Platform

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

This vulnerability is classified as Cryptographic Issues (CWE-310).

Know when Aqt1000 Firmware gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 7.1 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Executive ViewAI

Why It Matters

Organizations using Cryptographic face moderate risk from CVE-2025-21422 rated CVSS 7.1. Exploitation could compromise the security of affected deployments. Organizations should apply vendor updates when available and consider compensating controls in the interim.

Business Impact: Moderate
Compensating Controls

Apply vendor patch. If immediate patching is not feasible: (1) Implement network-level access controls to limit exposure; (2) Enable enhanced monitoring and alerting; (3) Apply principle of least privilege.

Threat Intelligence Overview

EPSS Score
0.0%
Top 98% exploitable
Data Quality
4 sources
Confidence: Medium
EUVD NVD CVE.org EPSS

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC No
EPSS 0.0%
Patch available No
Active threat No
Deciding rule
HIGH severity (CVSS 7.0-8.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

Exploitation· derived
None
System Exposure· derived
Small
Automatable· derived
No

Priority Score

36
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +36
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

More in Aqt1000 Firmware

View all
CVE-2025-21480 HIGH
8.6 Jun 03

Qualcomm GPU micronode contains a memory corruption vulnerability (CVE-2025-21480, CVSS 8.6) caused by unauthorized comm
CVE-2025-21479 HIGH
8.6 Jun 03

A second Qualcomm GPU micronode memory corruption vulnerability (CVE-2025-21479, CVSS 8.6) exists in the unauthorized co
CVE-2023-22388 CRITICAL
9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v
CVE-2023-22385 CRITICAL
9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner
CVE-2023-28562 CRITICAL
9.8 Sep 05

Memory corruption while handling payloads from remote ESL. Rated critical severity (CVSS 9.8), this vulnerability is rem
CVE-2023-21631 CRITICAL
9.8 Jul 04

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received
CVE-2022-33234 CRITICAL
9.8 Nov 15

Memory corruption in video due to configuration weakness. Rated critical severity (CVSS 9.8), this vulnerability is remo
CVE-2022-25748 CRITICAL
9.8 Oct 19

Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. Rated critical severity (
CVE-2022-25720 CRITICAL
9.8 Oct 19

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute
CVE-2022-25687 CRITICAL
9.8 Oct 19

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdr
CVE-2022-25688 CRITICAL
9.8 Sep 16

Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, S
CVE-2022-25686 CRITICAL
9.8 Sep 16

Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Comput

Same weakness CWE-310 – Cryptographic Issues

View all
CVE-2015-0204 MEDIUM POC
4.3
CVE-2015-4000 LOW POC
3.7
CVE-2014-3566 LOW POC
3.4
CVE-2014-8684 CRITICAL POC
9.8
CVE-2012-1803 HIGH POC
8.5
CVE-2013-4787 CRITICAL POC
9.3
CVE-2014-8686 CRITICAL POC
9.8
CVE-2013-0137 CRITICAL
10.0

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2025-68613 HIGH POC
8.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5

References

Advisories & patches
ADVISORY https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-21422

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy