What is the CVSS score of CVE-2025-21470?

CVE-2025-21470 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Aqt1000 Firmware are affected by CVE-2025-21470?

CVE-2025-21470 presents notable security risk, a improper access control vulnerability rated CVSS 7.8. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-21470?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Aqt1000 Firmware CVE-2025-21470

HIGH

Improper Access Control (CWE-284)

2025-05-06 product-security@qualcomm.com

Authentication Bypass Buffer Overflow Aqt1000 Firmware Fastconnect 6200 Firmware Fastconnect 6700 Firmware Fastconnect 6800 Firmware Fastconnect 6900 Firmware Fastconnect 7800 Firmware Qca6391 Firmware Qca6420 Firmware Qca6430 Firmware Qcm5430 Firmware Qcm6490 Firmware Qcs5430 Firmware Qcs6490 Firmware Sc8180x Aaab Firmware Sc8180x Acaf Firmware Sc8180x Ad Firmware Sc8280xp Abbb Firmware Sc8380xp Firmware Video Collaboration Vc3 Platform Firmware Wcd9340 Firmware Wcd9341 Firmware Wcd9370 Firmware Wcd9375 Firmware Wcd9380 Firmware Wcd9385 Firmware Wsa8810 Firmware Wsa8815 Firmware Wsa8830 Firmware Wsa8835 Firmware Wsa8840 Firmware Wsa8845 Firmware Wsa8845h Firmware Snapdragon 7C Gen 3 Compute Firmware

7.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:40 vuln.today

CVE Published

May 06, 2025 - 09:15 nvd

HIGH 7.8

DescriptionNVD

Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.

AnalysisAI

Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-284. Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter. Affected products include: Qualcomm Aqt1000 Firmware, Qualcomm Fastconnect 6200 Firmware, Qualcomm Fastconnect 6700 Firmware, Qualcomm Fastconnect 6800 Firmware, Qualcomm Fastconnect 6900 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2025-21470 vulnerability details – vuln.today

Back

Aqt1000 Firmware CVE-2025-21470

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code