VULNERABILITY INTELLIGENCE

CVE-2025-21468

CVSS score7.8 HIGH
EPSS probability0.11%
CISA KEVNot currently listed
Published2025-05-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.

Weakness classification

  • product-security@qualcomm.com: CWE-787

Primary references