CVE-2025-21476

nvd nist

Published: Sep 24, 2025Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: product-security@qualcomm.com (Secondary)

Description

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

Affected (42)

Products: Qualcomm: Qcs6490 Firmware, Qcs8550 Firmware, Qcs9100 Firmware, Sg8275 Firmware, Sg8275p Firmware, Sm6650 Firmware, Sm7635 Firmware, Sm7675 Firmware, Sm7675p Firmware, Sm8550 Firmware, Sm8550p Firmware, Sm8635 Firmware, Sm8635p Firmware, Sm8650 Firmware, Sm8650p Firmware, Sm8650q Firmware, Sm8750 Firmware, Sm8750p Firmware, Sxr2330p Firmware, Qca6391 Firmware, Qca6698aq Firmware, Qcn9011 Firmware, Qcn9012 Firmware, Qcn9274 Firmware, Wcn3910 Firmware, Wcn3950 Firmware, Wcn6650 Firmware, Wcn6750 Firmware, Wcn6755 Firmware, Wcn6855 Firmware, Wcn6856 Firmware, Wcn7850 Firmware, Wcn7851 Firmware, Wcn7860 Firmware, Wcn7861 Firmware, Wcn7880 Firmware, Wcn7881 Firmware, Qcm5430 Firmware, Qcm6490 Firmware, Qcm8550 Firmware, Qcs5430 Firmware, Qcs615 Firmware

42 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcs6490 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcs6490	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcs8550 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcs8550	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcs9100 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcs9100	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sg8275 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sg8275	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sg8275p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sg8275p	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm6650 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm6650	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm7635 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm7635	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm7675 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm7675	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm7675p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm7675p	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8550 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8550	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8550p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8550p	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8635 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8635	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8635p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8635p	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8650 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8650	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8650p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8650p	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8650q Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8650q	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8750 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8750	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8750p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8750p	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sxr2330p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sxr2330p	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca6391 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca6391	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca6698aq Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca6698aq	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9011 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9011	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9012 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9012	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9274 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9274	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn3910 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn3910	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn3950 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn3950	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn6650 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn6650	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn6750 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn6750	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn6755 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn6755	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn6855 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn6855	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn6856 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn6856	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7850 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7850	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7851 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7851	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7860 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7860	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7861 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7861	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7880 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7880	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcn7881 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcn7881	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcm5430 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcm5430	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcm6490 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcm6490	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcm8550 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcm8550	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcs5430 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcs5430	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcs615 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcs615	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (1)

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html

Source: product-security@qualcomm.com

Vendor Advisory

Timeline

No history available yet.