CVE-2025-21439: Out-of-bounds Read in Windows WLAN Host
Published Apr 7, 2025
·Updated
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.
Affected Software
51 affected components
Microsoft Windows WLAN Host
All of the following
Qualcomm Fastconnect 6700 Firmware
Qualcomm Fastconnect 6700
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Qca6595au Firmware
Qualcomm Qca6595au
All of the following
Qualcomm Qcm5430 Firmware
Qualcomm Qcm5430
All of the following
Qualcomm Qcm6490 Firmware
Qualcomm Qcm6490
All of the following
Qualcomm Qcn7605 Firmware
Qualcomm Qcn7605
All of the following
Qualcomm Qcn7606 Firmware
Qualcomm Qcn7606
All of the following
Qualcomm Qcs5430 Firmware
Qualcomm Qcs5430
All of the following
Qualcomm Qcs6490 Firmware
Qualcomm Qcs6490
All of the following
Qualcomm Video Collaboration Vc3 Platform Firmware
Qualcomm Video Collaboration Vc3 Platform
All of the following
Qualcomm Sc8180x\+sdx55 Firmware
Qualcomm Sc8180x\+sdx55
All of the following
Qualcomm Snapdragon 8c Compute Platform \(sc8180x-ad\) Firmware
Qualcomm Snapdragon 8c Compute Platform \(sc8180x-ad\)
All of the following
Qualcomm Snapdragon 8c Compute Platform \(sc8180xp-ad\) Firmware
Qualcomm Snapdragon 8c Compute Platform \(sc8180xp-ad\)
All of the following
Qualcomm Snapdragon 8cx Compute Platform \(sc8180x-aa\) Firmware
Qualcomm Snapdragon 8cx Compute Platform \(sc8180x-aa\)
All of the following
Qualcomm Snapdragon 8cx Compute Platform \(sc8180x-ab\) Firmware
Qualcomm Snapdragon 8cx Compute Platform \(sc8180x-ab\)
All of the following
Qualcomm Snapdragon 8cx Compute Platform \(sc8180xp-ac\) Firmware
Qualcomm Snapdragon 8cx Compute Platform \(sc8180xp-ac\)
All of the following
Qualcomm Snapdragon 8cx Compute Platform \(sc8180xp-af\) Firmware
Qualcomm Snapdragon 8cx Compute Platform \(sc8180xp-af\)
All of the following
Qualcomm Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180x-ac\) Firmware
Qualcomm Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180x-ac\)
All of the following
Qualcomm Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180x-af\) Firmware
Qualcomm Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180x-af\)
All of the following
Qualcomm Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180xp-aa\) Firmware
Qualcomm Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180xp-aa\)
All of the following
Qualcomm Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180xp-ab\) Firmware
Qualcomm Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180xp-ab\)
All of the following
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
All of the following
Qualcomm Wcd9375 Firmware
Qualcomm Wcd9375
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
Event History
Apr 7, 2025
CVE Published
via MITRE·10:16 AM
Data Sourced
via MITRE·10:16 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-21439?
CVE-2025-21439 has a critical severity level due to potential memory corruption vulnerabilities.
2
How do I fix CVE-2025-21439?
To fix CVE-2025-21439, ensure that your Windows WLAN Host software is updated to the latest version provided by Microsoft.
3
What are the potential impacts of CVE-2025-21439?
CVE-2025-21439 may lead to unauthorized memory access and could allow an attacker to execute arbitrary code.
4
Which systems are affected by CVE-2025-21439?
CVE-2025-21439 affects Microsoft Windows WLAN Host drivers.
5
How is CVE-2025-21439 exploited?
CVE-2025-21439 can be exploited via an IOCTL call that improperly handles board data, leading to memory corruption.