What is the CVSS score of CVE-2025-21466?

CVE-2025-21466 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Aqt1000 Firmware are affected by CVE-2025-21466?

CVE-2025-21466 presents notable security risk, a use-after-free vulnerability rated CVSS 7.8. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-21466?

Within 7 days: Identify all affected systems and apply vendor patches promptly. If patching is delayed, consider network segmentation to limit exposure.

Aqt1000 Firmware CVE-2025-21466

EUVD-2025-20483 HIGH

Use After Free (CWE-416)

2025-07-08 product-security@qualcomm.com

Buffer Overflow Use After Free Memory Corruption Aqt1000 Firmware Fastconnect 6200 Firmware Fastconnect 6700 Firmware Fastconnect 6800 Firmware Fastconnect 6900 Firmware Fastconnect 7800 Firmware Qca6391 Firmware Qca6420 Firmware Qca6430 Firmware Qcm5430 Firmware Qcm6490 Firmware Qcs5430 Firmware Qcs6490 Firmware Sc8180x Aaab Firmware Sc8180x Acaf Firmware Sc8180x Ad Firmware Sc8180xp Aaab Firmware Sc8180xp Acaf Firmware Sc8180xp Ad Firmware Sc8280xp Abbb Firmware Sc8380xp Firmware Sm6250 Firmware Snapdragon 7c Compute Firmware Snapdragon 7c Gen 2 Compute Firmware Video Collaboration Vc3 Platform Firmware Wcd9340 Firmware Wcd9341 Firmware Wcd9370 Firmware Wcd9375 Firmware Wcd9380 Firmware Wcd9385 Firmware Wsa8810 Firmware Wsa8815 Firmware Wsa8830 Firmware Wsa8835 Firmware Wsa8840 Firmware Wsa8845 Firmware Wsa8845h Firmware

7.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 04:21 euvd

EUVD-2025-20483

Analysis Generated

Mar 16, 2026 - 04:21 vuln.today

CVE Published

Jul 08, 2025 - 13:15 nvd

HIGH 7.8

DescriptionNVD

Memory corruption while processing a private escape command in an event trigger.

Analysis

Memory corruption while processing a private escape command in an event trigger.

Technical ContextAI

A use-after-free vulnerability occurs when a program continues to use a pointer after the referenced memory has been freed, leading to undefined behavior. This vulnerability is classified as Use After Free (CWE-416).

RemediationAI

Use memory-safe languages. Implement proper object lifecycle management. Use static and dynamic analysis tools to detect UAF patterns.

CVE-2025-21466 vulnerability details – vuln.today

Back

Aqt1000 Firmware CVE-2025-21466

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

Analysis

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code