215 Mobile Firmware
CVE-2025-21467
HIGH
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
Memory corruption while reading the FW response from the shared queue.
AnalysisAI
Memory corruption while reading the FW response from the shared queue. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.
Technical ContextAI
This vulnerability is classified as Out-of-bounds Write (CWE-787), which allows attackers to write data beyond allocated buffer boundaries leading to code execution or crashes. Memory corruption while reading the FW response from the shared queue. Affected products include: Qualcomm Csra6620 Firmware, Qualcomm Csra6640 Firmware, Qualcomm Fastconnect 6200 Firmware, Qualcomm Fastconnect 6700 Firmware, Qualcomm Fastconnect 6800 Firmware.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Validate write boundaries, use memory-safe languages, enable compiler protections (ASLR, stack canaries).
More in 215 Mobile Firmware
View allInformation disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential f
Memory corruption while processing video packets received from video firmware.
Memory corruption when two threads try to map and unmap a single node simultaneously. Rated high severity (CVSS 7.8), th
Memory corruption when user provides data for FM HCI command control operations. Rated high severity (CVSS 7.8), this vu
Memory corruption when the payload received from firmware is not as per the expected protocol size. Rated high severity
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux. Rated high severity (CVSS 7.8), this vulnerability is
Memory corruption when there is failed unmap operation in GPU. Rated high severity (CVSS 7.8), this vulnerability is low
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today