CVE-2025-21435: Buffer Over-read in WLAN Host Communication
Transient DOS may occur while parsing extended IE in beacon.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2025-04-05
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21435?
CVE-2025-21435 has been classified as a high-severity vulnerability due to the potential for transient denial of service during extended Information Elements parsing.
How do I fix CVE-2025-21435?
To fix CVE-2025-21435, update your Google Android device to the latest version provided in the security bulletin.
What types of software are affected by CVE-2025-21435?
CVE-2025-21435 specifically affects Google Android devices.
What kind of attacks can exploit CVE-2025-21435?
CVE-2025-21435 can be exploited to cause a transient denial of service by manipulating extended Information Elements in beacons.
Is there a workaround for CVE-2025-21435?
Currently, there are no documented workarounds for CVE-2025-21435, so applying the update is the recommended approach.