Details of VAR-202509-4136

ID

VAR-202509-4136

CVE

CVE-2025-21484

TITLE

Buffer over-read vulnerability in multiple Qualcomm products

Trust: 0.8

sources: JVNDB: JVNDB-2025-020528

DESCRIPTION

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet. sm8750 firmware, sm8750p firmware, SM8850 A buffer over-read vulnerability exists in firmware and other parts of multiple Qualcomm products.Information is obtained and service operation is interrupted (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2025-21484 // JVNDB: JVNDB-2025-020528

AFFECTED PRODUCTS

vendor:	qualcomm	model:	qca6698au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 6900	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sw5100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs4490	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 680 4g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 460 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 865 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 662 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 210 processor	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm6250	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6145p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8845h	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd855	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 855\+\/860 mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm4125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sw5100p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8770p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3615	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8832	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs610	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6678aq	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon xr1 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3980	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 730g mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 4 gen 1 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa9000p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qam8295p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8209	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 626 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 865\+ 5g mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8195p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6420	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8840	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa4155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm8750p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qam8650p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8996au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8145p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9326	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon x50 5g modem-rf system	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 720g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn7880	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 660 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 750g 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8775p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon x55 5g modem-rf system	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdm429w	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qam8775p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8830	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 765 5g mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	robotics rb3 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sxr1120	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6696	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9340	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	video collaboration vc1 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 835 mobile pc platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm8850p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6797aq	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	aqt1000	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn7860	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 429 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm8850	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	video collaboration vc3 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8650p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8064au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd626	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa7775p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smart display 200 platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm5430	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6688aq	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3620	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8620p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	vision intelligence 100 platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 870 5g mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sxr2130	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qam8255p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon xr2\+ gen 1 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8108	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3950	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3910	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 6700	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 6200	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa7255p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9380	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon xr2 5g platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 208 processor	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 7800	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm6125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8155	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx55	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6426	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8255p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn7861	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 625 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm8750	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9375	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	vision intelligence 200 platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3680b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	vision intelligence 300 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm7250p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs6125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6320	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9395	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 8 gen 3 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd730	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9390	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 855 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 732g mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3610	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 6800	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6310	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	205 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon w5\+ gen 1 wearable platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9335	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 675 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 730 mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6155	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 212 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8608	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 685 4g mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 765g 5g mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm6490	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6430	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3660b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	vision intelligence 400 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 820 automotive platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sg4150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 678 mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6335	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 480\+ 5g mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn7881	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8845	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9370	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8835	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8810	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 695 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm6370	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 845 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 768g 5g mobile platform \	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs410	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3990	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	215 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 690 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd835	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs5430	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm4490	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8815	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8295p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3988	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 8\+ gen 1 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd865 5g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9385	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6391	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa4150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9341	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6436	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 480 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6698aq	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd660	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs6490	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smart audio 200 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	クアルコム	model:	smart audio 200 platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 678 mobile platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	smart display 200 platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	sm8850p	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 210 processor	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 626 mobile platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 212 mobile platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 480 5g mobile platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 660 mobile platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 662 mobile platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 480+ 5g mobile platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 429 mobile platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 625 mobile platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	sm8750	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 208 processor	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 675 mobile platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 460 mobile platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	sm8750p	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	snapdragon 4 gen 1 mobile platform	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	sm8850	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2025-020528 // NVD: CVE-2025-21484

CVSS

SEVERITY

CVSSV2

CVSSV3

product-security@qualcomm.com:	CVE-2025-21484
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2025-020528
value:	HIGH
Trust: 0.8

product-security@qualcomm.com:	CVE-2025-21484
baseSeverity:	HIGH
baseScore:	8.2
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	LOW
exploitabilityScore:	3.9
impactScore:	4.2
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2025-020528
baseSeverity:	HIGH
baseScore:	8.2
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	LOW
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2025-020528 // NVD: CVE-2025-21484

PROBLEMTYPE DATA

problemtype:	CWE-126	Trust: 1.0
problemtype:	buffer over read (CWE-126) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2025-020528 // NVD: CVE-2025-21484

EXTERNAL IDS

db:	NVD	id:	CVE-2025-21484	Trust: 2.6
db:	JVNDB	id:	JVNDB-2025-020528	Trust: 0.8

sources: JVNDB: JVNDB-2025-020528 // NVD: CVE-2025-21484

REFERENCES

url:	https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2025-21484	Trust: 0.8

sources: JVNDB: JVNDB-2025-020528 // NVD: CVE-2025-21484

SOURCES

db:	JVNDB	id:	JVNDB-2025-020528
db:	NVD	id:	CVE-2025-21484

LAST UPDATE DATE

2025-12-20T23:40:19.442000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2025-020528	date:	2025-11-28T06:51:00
db:	NVD	id:	CVE-2025-21484	date:	2025-11-25T20:42:01.503

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2025-020528	date:	2025-11-28T00:00:00
db:	NVD	id:	CVE-2025-21484	date:	2025-09-24T16:15:34.093