CVE-2025-21476

HIGH
2025-09-24 [email protected]
7.8
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Analysis Generated
Mar 28, 2026 - 19:13 vuln.today
CVE Published
Sep 24, 2025 - 16:15 nvd
HIGH 7.8

Tags

Buffer Overflow Qcs6490 Firmware Qcs8550 Firmware Qcs9100 Firmware Sg8275 Firmware Sg8275p Firmware Sm6650 Firmware Sm7635 Firmware Sm7675 Firmware Sm7675p Firmware Sm8550 Firmware Sm8550p Firmware Sm8635 Firmware Sm8635p Firmware Sm8650 Firmware Sm8650P Firmware Sm8650q Firmware Sm8750 Firmware Sm8750p Firmware Sxr2330p Firmware Qca6391 Firmware Qca6698aq Firmware Qcn9011 Firmware Qcn9012 Firmware Qcn9274 Firmware Wcn3910 Firmware Wcn3950 Firmware Wcn6650 Firmware Wcn6750 Firmware Wcn6755 Firmware Wcn6855 Firmware Wcn6856 Firmware Wcn7850 Firmware Wcn7851 Firmware Wcn7860 Firmware Wcn7861 Firmware Wcn7880 Firmware Wcn7881 Firmware Qcm5430 Firmware Qcm6490 Firmware Qcm8550 Firmware Qcs5430 Firmware Qcs615 Firmware

Description

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

Analysis

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical Context

This vulnerability is classified as Buffer Copy without Size Check (CWE-120), which allows attackers to overflow a buffer to corrupt adjacent memory. Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake. Affected products include: Qualcomm Qcs6490 Firmware, Qualcomm Qcs8550 Firmware, Qualcomm Qcs9100 Firmware, Qualcomm Sg8275 Firmware, Qualcomm Sg8275P Firmware.

Affected Products

Qualcomm Qcs6490 Firmware, Qualcomm Qcs8550 Firmware, Qualcomm Qcs9100 Firmware, Qualcomm Sg8275 Firmware, Qualcomm Sg8275P Firmware.

Remediation

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Always validate buffer sizes before copy operations. Use bounded functions (strncpy, snprintf). Enable compiler protections.

Priority Score

39
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +39
POC: 0

Share

CVE-2025-21476 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy