9206 Lte Modem Firmware
CVE-2025-21429
HIGH
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
AnalysisAI
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-126. Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request. Affected products include: Qualcomm Sa9000P Firmware, Qualcomm Sd626 Firmware, Qualcomm Sd660 Firmware, Qualcomm Sd670 Firmware, Qualcomm Sd730 Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in 9206 Lte Modem Firmware
View allMemory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v
Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner
Memory corruption in HLOS while running playready use-case. Rated critical severity (CVSS 9.3), this vulnerability is no
Memory corruption in Audio during playback with speaker protection. Rated high severity (CVSS 8.4), this vulnerability i
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network. Rated
Memory corruption in Audio when memory map command is executed consecutively in ADSP. Rated high severity (CVSS 7.8), th
Memory corruption in Qualcomm's PlayReady Trusted Application (TA) occurs when the TA processes crafted commands, and si
Memory corruption when allocating and accessing an entry in an SMEM partition continuously. Rated high severity (CVSS 7.
Memory corruption while processing GPU page table switch. Rated high severity (CVSS 7.8), this vulnerability is low atta
Memory corruption while processing voice packet with arbitrary data received from ADSP. Rated high severity (CVSS 7.8),
Memory corruption when there is failed unmap operation in GPU. Rated high severity (CVSS 7.8), this vulnerability is low
Memory corruption while using the UIM diag command to get the operators name. Rated high severity (CVSS 7.8), this vulne
Same weakness CWE-126 – Buffer Over-read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today