7.8

CVE-2025-21426

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Memory corruption while processing camera TPG write request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Fastconnect 7800 Firmware Version -
   Qualcomm ≫ Fastconnect 7800 Version -
Qualcomm ≫ Ssg2115p Firmware Version -
   Qualcomm ≫ Ssg2115p Version -
Qualcomm ≫ Ssg2125p Firmware Version -
   Qualcomm ≫ Ssg2125p Version -
Qualcomm ≫ Sxr1230p Firmware Version -
   Qualcomm ≫ Sxr1230p Version -
Qualcomm ≫ Wcd9380 Firmware Version -
   Qualcomm ≫ Wcd9380 Version -
Qualcomm ≫ Wcd9385 Firmware Version -
   Qualcomm ≫ Wcd9385 Version -
Qualcomm ≫ Wsa8830 Firmware Version -
   Qualcomm ≫ Wsa8830 Version -
Qualcomm ≫ Wsa8832 Firmware Version -
   Qualcomm ≫ Wsa8832 Version -
Qualcomm ≫ Wsa8835 Firmware Version -
   Qualcomm ≫ Wsa8835 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.09% 0.005
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Qualcomm 6.6 1.8 4.7
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
Patch
Vendor Advisory