Skip to main content

Snapdragon 480 5g Mobile Firmware CVE-2025-21450

| EUVDEUVD-2025-20485 CRITICAL
Improper Authentication (CWE-287)
2025-07-08 product-security@qualcomm.com
Authentication Bypass Snapdragon 480 5g Mobile Firmware Wcd9375 Firmware Sdx61 Firmware Qca6584au Firmware Qcn6024 Firmware Qep8111 Firmware Fastconnect 6700 Firmware Sm4635 Firmware Qca6391 Firmware Qca6696 Firmware Sm8635 Firmware Qcc710 Firmware Snapdragon X75 5g Modem Rf Firmware Wcd9380 Firmware Snapdragon 695 5g Mobile Firmware Wcn7881 Firmware Sm8635p Firmware Wsa8835 Firmware Snapdragon X35 5g Modem Rf Firmware Qcm8550 Firmware Snapdragon 8 Gen 1 Mobile Firmware Sm6650p Firmware Sdx80m Firmware Snapdragon 8 Gen 3 Mobile Firmware Qca6688aq Firmware Qcn9024 Firmware Wcn3980 Firmware Wsa8810 Firmware Snapdragon 4 Gen 1 Mobile Firmware Qcm6490 Firmware Qca6574a Firmware Wcn6450 Firmware Qcn9012 Firmware Qca6698aq Firmware Wcd9385 Firmware Wcd9395 Firmware Snapdragon Auto 5g Modem Rf Gen 2 Firmware Sm6650 Firmware Qca6595au Firmware Qcn6224 Firmware Sm8750p Firmware Wsa8832 Firmware Qcs5430 Firmware Wsa8815 Firmware Wcd9370 Firmware Qcs6490 Firmware Qcs8550 Firmware Wcn7880 Firmware Qfw7114 Firmware Wcd9378 Firmware Qcn9011 Firmware Wcd9360 Firmware Sd 8 Gen1 5g Firmware Ar8035 Firmware Snapdragon 778g 5g Mobile Firmware Wsa8845 Firmware Wcn3950 Firmware Qca6698au Firmware Fastconnect 6900 Firmware Qcm5430 Firmware Qcm4490 Firmware Wsa8845h Firmware Sw5100 Firmware Wcn7861 Firmware Sm7635 Firmware Wcd9340 Firmware Wsa8830 Firmware Sg8275p Firmware Sw5100p Firmware Snapdragon Auto 5g Modem Rf Firmware Qcs4490 Firmware Wcn6650 Firmware Sm7675 Firmware Qca6797aq Firmware Sm7675p Firmware Wsa8840 Firmware Wcd9390 Firmware Sm7325p Firmware Snapdragon 782g Mobile Firmware Wcn6755 Firmware Sm8750 Firmware Snapdragon X32 5g Modem Rf Firmware Qcn6274 Firmware Fastconnect 7800 Firmware Snapdragon X62 5g Modem Rf Firmware Sm6370 Firmware Sm8650q Firmware Sm7635p Firmware Fastconnect 6200 Firmware Snapdragon 888 5g Mobile Firmware Qfw7124 Firmware Qca6574au Firmware Qca6678aq Firmware Video Collaboration Vc3 Platform Firmware Sdx55 Firmware Qca8337 Firmware Snapdragon X72 5g Modem Rf Firmware Wcn7860 Firmware Qca6174a Firmware Qca8081 Firmware Snapdragon X65 5g Modem Rf Firmware Wcn3988 Firmware
9.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.1 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

3
EUVD ID Assigned
Mar 16, 2026 - 04:21 euvd
EUVD-2025-20485
Analysis Generated
Mar 16, 2026 - 04:21 vuln.today
CVE Published
Jul 08, 2025 - 13:15 nvd
CRITICAL 9.1

DescriptionCVE.org

Cryptographic issue occurs due to use of insecure connection method while downloading.

Analysis

Cryptographic issue occurs due to use of insecure connection method while downloading.

Technical ContextAI

An authentication bypass vulnerability allows attackers to circumvent login mechanisms and gain unauthorized access without valid credentials. This vulnerability is classified as Improper Authentication (CWE-287).

RemediationAI

Implement robust authentication mechanisms. Use multi-factor authentication. Review authentication logic for bypass conditions. Remove default credentials.

More in Snapdragon 480 5g Mobile Firmware

View all
CVE-2024-21480 CRITICAL
9.8 May 06

Memory corruption while playing audio file having large-sized input buffer. Rated critical severity (CVSS 9.8), this vul
CVE-2024-21463 CRITICAL
9.8 Apr 01

Memory corruption while processing Codec2 during v13k decoder pitch synthesis. Rated critical severity (CVSS 9.8), this

CVE-2025-21427 HIGH
8.2 Jul 08

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
CVE-2025-21468 HIGH
7.8 May 06

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to w
CVE-2025-21453 HIGH
7.8 May 06

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential f
CVE-2024-49835 HIGH
7.8 May 06

Memory corruption while reading secure file. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity
CVE-2025-27061 HIGH
7.8 Jul 08

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the vid
CVE-2025-27052 HIGH
7.8 Jul 08

Memory corruption while processing data packets in diag received from Unix clients.
CVE-2025-27043 HIGH
7.8 Jul 08

Memory corruption while processing manipulated payload in video firmware.
CVE-2025-27042 HIGH
7.8 Jul 08

Memory corruption while processing video packets received from video firmware.
CVE-2025-21432 HIGH
7.8 Jul 08

CVE-2025-21432 is a security vulnerability (CVSS 7.8). High severity vulnerability requiring prompt remediation.
CVE-2025-47398 HIGH
7.8 Feb 02

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers

Same weakness CWE-287 – Improper Authentication

View all
CVE-2020-0688 HIGH POC
8.8
CVE-2023-46805 HIGH POC
8.2
CVE-2015-1187 CRITICAL POC
9.8
CVE-2024-7593 CRITICAL POC
9.8
CVE-2017-7921 CRITICAL POC
9.8
CVE-2024-53704 CRITICAL POC
9.8
CVE-2015-7755 CRITICAL POC
9.8
CVE-2013-0625 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2025-21450 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy