CVE-2025-21428: Buffer Over-read in WLAN Host
Published Apr 7, 2025
ยทUpdated
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
Affected Software
138 affected components
All of the following
Qualcomm Snapdragon 439 Mobile Platform Firmware
Qualcomm Snapdragon 439 Mobile Platform
All of the following
Qualcomm Snapdragon 625 Mobile Platform Firmware
Qualcomm Snapdragon 625 Mobile Platform
All of the following
Qualcomm Snapdragon 626 Mobile Platform Firmware
Qualcomm Snapdragon 626 Mobile Platform
All of the following
Qualcomm Snapdragon 632 Mobile Platform Firmware
Qualcomm Snapdragon 632 Mobile Platform
All of the following
Qualcomm Snapdragon 820 Automotive Platform Firmware
Qualcomm Snapdragon 820 Automotive Platform
All of the following
Qualcomm Snapdragon Auto 5g Modem-rf Firmware
Qualcomm Snapdragon Auto 5g Modem-rf
All of the following
Qualcomm Snapdragon X12 Lte Modem Firmware
Qualcomm Snapdragon X12 Lte Modem
All of the following
Qualcomm Snapdragon X35 5g Modem-rf System Firmware
Qualcomm Snapdragon X35 5g Modem-rf System
All of the following
Qualcomm Snapdragon X5 Lte Modem Firmware
Qualcomm Snapdragon X5 Lte Modem
All of the following
Qualcomm Vision Intelligence 100 Platform \(apq8053-aa\) Firmware
Qualcomm Vision Intelligence 100 Platform \(apq8053-aa\)
All of the following
Qualcomm Vision Intelligence 200 Platform \(apq8053-ac\) Firmware
Qualcomm Vision Intelligence 200 Platform \(apq8053-ac\)
All of the following
Qualcomm Wcd9326 Firmware
Qualcomm Wcd9326
All of the following
Qualcomm Wcd9330 Firmware
Qualcomm Wcd9330
All of the following
Qualcomm Wcd9335 Firmware
Qualcomm Wcd9335
All of the following
Qualcomm Wcd9340 Firmware
Qualcomm Wcd9340
All of the following
Qualcomm Wcn3610 Firmware
Qualcomm Wcn3610
All of the following
Qualcomm Wcn3615 Firmware
Qualcomm Wcn3615
All of the following
Qualcomm Wcn3620 Firmware
Qualcomm Wcn3620
All of the following
Qualcomm Wcn3660b Firmware
Qualcomm Wcn3660b
All of the following
Qualcomm Wcn3680 Firmware
Qualcomm Wcn3680
All of the following
Qualcomm Wcn3680b Firmware
Qualcomm Wcn3680b
All of the following
Qualcomm Wcn3980 Firmware
Qualcomm Wcn3980
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
All of the following
Qualcomm 9206 Lte Modem Firmware
Qualcomm 9206 Lte Modem
All of the following
Qualcomm Apq8017 Firmware
Qualcomm Apq8017
All of the following
Qualcomm Ar8031 Firmware
Qualcomm Ar8031
All of the following
Qualcomm C-v2x 9150 Firmware
Qualcomm C-v2x 9150
All of the following
Qualcomm Csra6620 Firmware
Qualcomm Csra6620
All of the following
Qualcomm Csra6640 Firmware
Qualcomm Csra6640
All of the following
Qualcomm Fastconnect 6200 Firmware
Qualcomm Fastconnect 6200
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Mdm9250 Firmware
Qualcomm Mdm9250
All of the following
Qualcomm Mdm9628 Firmware
Qualcomm Mdm9628
All of the following
Qualcomm Mdm9640 Firmware
Qualcomm MDM9640
All of the following
Qualcomm Mdm9650 Firmware
Qualcomm MDM9650
All of the following
Qualcomm Msm8996au Firmware
Qualcomm MSM8996AU
All of the following
Qualcomm Qca6174 Firmware
Qualcomm Qca6174
All of the following
Qualcomm Qca6174a Firmware
Qualcomm QCA6174A
All of the following
Qualcomm Qca6175a Firmware
Qualcomm Qca6175a
All of the following
Qualcomm Qca6554a Firmware
Qualcomm Qca6554a
All of the following
Qualcomm Qca6564a Firmware
Qualcomm Qca6564a
All of the following
Qualcomm Qca6564au Firmware
Qualcomm Qca6564au
All of the following
Qualcomm Qca6574 Firmware
Qualcomm QCA6574
All of the following
Qualcomm Qca6574a Firmware
Qualcomm Qca6574a
All of the following
Qualcomm Qca6574au Firmware
Qualcomm QCA6574AU
All of the following
Qualcomm Qca6584 Firmware
Qualcomm QCA6584
All of the following
Qualcomm Qca6584au Firmware
Qualcomm QCA6584AU
All of the following
Qualcomm Qca6595 Firmware
Qualcomm Qca6595
All of the following
Qualcomm Qca6595au Firmware
Qualcomm Qca6595au
All of the following
Qualcomm Qca6696 Firmware
Qualcomm Qca6696
All of the following
Qualcomm Qca9367 Firmware
Qualcomm Qca9367
All of the following
Qualcomm Qca9377 Firmware
Qualcomm QCA9377
All of the following
Qualcomm Qca9379 Firmware
Qualcomm QCA9379
All of the following
Qualcomm Qcm2150 Firmware
Qualcomm Qcm2150
All of the following
Qualcomm Qep8111 Firmware
Qualcomm Qep8111
All of the following
Qualcomm Qualcomm 205 Mobile Platform Firmware
Qualcomm Qualcomm 205 Mobile Platform
All of the following
Qualcomm Qualcomm 215 Mobile Platform Firmware
Qualcomm Qualcomm 215 Mobile Platform
All of the following
Qualcomm Sa2150p Firmware
Qualcomm Sa2150p
All of the following
Qualcomm Sd626 Firmware
Qualcomm Sd626
All of the following
Qualcomm Sdm429w Firmware
Qualcomm Sdm429w
All of the following
Qualcomm Smart Audio 200 Platform Firmware
Qualcomm Smart Audio 200 Platform
All of the following
Qualcomm Smart Audio 400 Platform Firmware
Qualcomm Smart Audio 400 Platform
All of the following
Qualcomm Smart Display 200 Platform \(apq5053-aa\) Firmware
Qualcomm Smart Display 200 Platform \(apq5053-aa\)
All of the following
Qualcomm Snapdragon 1200 Wearable Platform Firmware
Qualcomm Snapdragon 1200 Wearable Platform
All of the following
Qualcomm Snapdragon 210 Processor Firmware
Qualcomm Snapdragon 210 Processor
All of the following
Qualcomm Snapdragon 212 Mobile Platform Firmware
Qualcomm Snapdragon 212 Mobile Platform
All of the following
Qualcomm Snapdragon 425 Mobile Platform Firmware
Qualcomm Snapdragon 425 Mobile Platform
All of the following
Qualcomm Snapdragon 429 Mobile Platform Firmware
Qualcomm Snapdragon 429 Mobile Platform
Event History
Apr 7, 2025
CVE Published
via MITREยท10:15 AM
Data Sourced
via MITREยท10:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVDยท11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-21428?
CVE-2025-21428 is considered a high-severity vulnerability due to the potential for memory corruption during connection setup.
2
How do I fix CVE-2025-21428?
To fix CVE-2025-21428, update the affected Qualcomm Snapdragon firmware to the latest version provided by Qualcomm.
3
What types of devices are affected by CVE-2025-21428?
CVE-2025-21428 affects devices utilizing Qualcomm Snapdragon 439, 625, 626, 632, and other mobile platforms.
4
What is the impact of CVE-2025-21428?
The impact of CVE-2025-21428 includes potential system crashes and unexpected behavior during network connection establishment.
5
When was CVE-2025-21428 reported?
CVE-2025-21428 was reported in April 2025 as part of a series of vulnerabilities identified by Qualcomm.