Skip to main content

Wcd9340 Firmware CVE-2025-21466

| EUVDEUVD-2025-20483 HIGH
Use After Free (CWE-416)
2025-07-08 product-security@qualcomm.com
Buffer Overflow Use After Free Memory Corruption Wcd9340 Firmware Sc8180x Aaab Firmware Wcd9341 Firmware Wcd9385 Firmware Fastconnect 6900 Firmware Wcd9370 Firmware Sc8180xp Aaab Firmware Qcm5430 Firmware Fastconnect 6200 Firmware Wcd9380 Firmware Sm6250 Firmware Qcs6490 Firmware Sc8180x Ad Firmware Sc8380xp Firmware Wsa8845h Firmware Wsa8835 Firmware Qcs5430 Firmware Qca6391 Firmware Wsa8840 Firmware Qca6420 Firmware Sc8280xp Abbb Firmware Wsa8830 Firmware Wsa8845 Firmware Video Collaboration Vc3 Platform Firmware Fastconnect 6700 Firmware Fastconnect 6800 Firmware Sc8180xp Acaf Firmware Qca6430 Firmware Snapdragon 7c Compute Firmware Aqt1000 Firmware Wsa8810 Firmware Sc8180xp Ad Firmware Snapdragon 7c Gen 2 Compute Firmware Wsa8815 Firmware Fastconnect 7800 Firmware Wcd9375 Firmware Qcm6490 Firmware Sc8180x Acaf Firmware
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
EUVD ID Assigned
Mar 16, 2026 - 04:21 euvd
EUVD-2025-20483
Analysis Generated
Mar 16, 2026 - 04:21 vuln.today
CVE Published
Jul 08, 2025 - 13:15 nvd
HIGH 7.8

DescriptionCVE.org

Memory corruption while processing a private escape command in an event trigger.

Analysis

Memory corruption while processing a private escape command in an event trigger.

Technical ContextAI

A use-after-free vulnerability occurs when a program continues to use a pointer after the referenced memory has been freed, leading to undefined behavior. This vulnerability is classified as Use After Free (CWE-416).

RemediationAI

Use memory-safe languages. Implement proper object lifecycle management. Use static and dynamic analysis tools to detect UAF patterns.

More in Wcd9340 Firmware

View all
CVE-2024-21480 CRITICAL
9.8 May 06

Memory corruption while playing audio file having large-sized input buffer. Rated critical severity (CVSS 9.8), this vul
CVE-2024-21473 CRITICAL
9.8 Apr 01

Memory corruption while redirecting log file to any file location with any file name. Rated critical severity (CVSS 9.8)
CVE-2024-21463 CRITICAL
9.8 Apr 01

Memory corruption while processing Codec2 during v13k decoder pitch synthesis. Rated critical severity (CVSS 9.8), this

CVE-2023-33083 CRITICAL
9.8 Dec 05

Memory corruption in WLAN Host while processing RRM beacon on the AP. Rated critical severity (CVSS 9.8), this vulnerabi
CVE-2023-33082 CRITICAL
9.8 Dec 05

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE. Rated critical seve
CVE-2023-33045 CRITICAL
9.8 Nov 07

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. Rated critical severity
CVE-2023-22388 CRITICAL
9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v
CVE-2023-33028 CRITICAL
9.8 Oct 03

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. Rated critical severity (CVSS 9.8), this vuln
CVE-2023-24855 CRITICAL
9.8 Oct 03

Memory corruption in Modem while processing security related configuration before AS Security Exchange. Rated critical s
CVE-2023-22385 CRITICAL
9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner
CVE-2023-28562 CRITICAL
9.8 Sep 05

Memory corruption while handling payloads from remote ESL. Rated critical severity (CVSS 9.8), this vulnerability is rem
CVE-2023-21631 CRITICAL
9.8 Jul 04

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received

Same weakness CWE-416 – Use After Free

View all
CVE-2019-0708 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2014-0322 HIGH POC
8.8
CVE-2012-4792 HIGH POC
8.8
CVE-2009-4324 HIGH POC
7.8
CVE-2015-0313 CRITICAL POC
9.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2013-2551 HIGH POC
8.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2017-11882 HIGH POC
7.8
CVE-2010-3333 HIGH POC
7.8

Share

CVE-2025-21466 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy