CVE-2025-21429: Buffer Over-read in WLAN Host
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/primato a version that resolves this vulnerability.Fixed in SoCVersion:2025-04-05 - Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qcacld-3.0to a version that resolves this vulnerability.Fixed in SoCVersion:2025-04-05
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21429?
CVE-2025-21429 has a critical severity rating due to its potential to cause memory corruption during Wi-Fi connectivity operations.
How do I fix CVE-2025-21429?
To mitigate CVE-2025-21429, update to the latest firmware version provided by Qualcomm or your device manufacturer.
Which devices are affected by CVE-2025-21429?
CVE-2025-21429 affects various Qualcomm chipsets found in devices including certain models of Android smartphones and embedded systems.
What does CVE-2025-21429 exploit?
CVE-2025-21429 exploits a vulnerability that leads to memory corruption when a station connects to an access point.
Is there a workaround for CVE-2025-21429?
Currently, the best workaround for CVE-2025-21429 is to avoid connecting to untrusted Wi-Fi networks until a patch is applied.