7.8

CVE-2025-21486

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

Data is provided by the National Vulnerability Database (NVD)
QualcommQmp1000 Firmware Version-
   QualcommQmp1000 Version-
QualcommSm8735 Firmware Version-
   QualcommSm8735 Version-
QualcommSm8750 Firmware Version-
   QualcommSm8750 Version-
QualcommSm8750p Firmware Version-
   QualcommSm8750p Version-
QualcommSw5100 Firmware Version-
   QualcommSw5100 Version-
QualcommSw5100p Firmware Version-
   QualcommSw5100p Version-
QualcommSxr2230p Firmware Version-
   QualcommSxr2230p Version-
QualcommSxr2250p Firmware Version-
   QualcommSxr2250p Version-
QualcommSxr2330p Firmware Version-
   QualcommSxr2330p Version-
QualcommWcd9378 Firmware Version-
   QualcommWcd9378 Version-
QualcommWcd9380 Firmware Version-
   QualcommWcd9380 Version-
QualcommWcd9385 Firmware Version-
   QualcommWcd9385 Version-
QualcommWcd9395 Firmware Version-
   QualcommWcd9395 Version-
QualcommWcn3660b Firmware Version-
   QualcommWcn3660b Version-
QualcommWcn3680b Firmware Version-
   QualcommWcn3680b Version-
QualcommWcn3980 Firmware Version-
   QualcommWcn3980 Version-
QualcommWcn3988 Firmware Version-
   QualcommWcn3988 Version-
QualcommWcn7750 Firmware Version-
   QualcommWcn7750 Version-
QualcommWcn7860 Firmware Version-
   QualcommWcn7860 Version-
QualcommWcn7861 Firmware Version-
   QualcommWcn7861 Version-
QualcommWcn7880 Firmware Version-
   QualcommWcn7880 Version-
QualcommWcn7881 Firmware Version-
   QualcommWcn7881 Version-
QualcommWsa8830 Firmware Version-
   QualcommWsa8830 Version-
QualcommWsa8832 Firmware Version-
   QualcommWsa8832 Version-
QualcommWsa8835 Firmware Version-
   QualcommWsa8835 Version-
QualcommWsa8840 Firmware Version-
   QualcommWsa8840 Version-
QualcommWsa8845 Firmware Version-
   QualcommWsa8845 Version-
QualcommWsa8845h Firmware Version-
   QualcommWsa8845h Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.045
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
product-security@qualcomm.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-822 Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.