What is the CVSS score of CVE-2025-21436?

CVE-2025-21436 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Fastconnect 7800 Firmware are affected by CVE-2025-21436?

CVE-2025-21436 presents notable security risk, a use-after-free vulnerability rated CVSS 7.8. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-21436?

Within 7 days: Identify all affected systems and apply vendor patches promptly. If patching is delayed, consider network segmentation to limit exposure.

Fastconnect 7800 Firmware CVE-2025-21436

HIGH

Use After Free (CWE-416)

2025-04-07 product-security@qualcomm.com

Buffer Overflow Use After Free Memory Corruption Fastconnect 7800 Firmware Qmp1000 Firmware Sm8735 Firmware Sm8750 Firmware Sm8750p Firmware Snapdragon 8 Gen 3 Mobile Platform Firmware Sw5100 Firmware Sw5100p Firmware Sxr2330p Firmware Wcd9378 Firmware Wcd9380 Firmware Wcd9390 Firmware Wcd9395 Firmware Wcn7750 Firmware Wcn7860 Firmware Wcn7861 Firmware Wcn7880 Firmware Wcn7881 Firmware Wsa8830 Firmware Wsa8832 Firmware Wsa8835 Firmware Wsa8840 Firmware Wsa8845 Firmware Wsa8845h Firmware Snapdragon W5 Gen 1 Wearable Platform Firmware

7.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:35 vuln.today

CVE Published

Apr 07, 2025 - 11:15 nvd

HIGH 7.8

DescriptionNVD

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.

AnalysisAI

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Use After Free (CWE-416), which allows attackers to access freed memory to execute arbitrary code or crash the application. Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads. Affected products include: Qualcomm Fastconnect 7800 Firmware, Qualcomm Qmp1000 Firmware, Qualcomm Sm8735 Firmware, Qualcomm Sm8750 Firmware, Qualcomm Sm8750P Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use smart pointers or garbage-collected languages. Set pointers to NULL after freeing. Enable memory sanitizers.

CVE-2025-21436 vulnerability details – vuln.today

Back

Fastconnect 7800 Firmware CVE-2025-21436

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code