CVE-2025-21453: Use After Free in GPS HLOS Driver
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/hardware/qcom/gpsto a version that resolves this vulnerability.Fixed in SoCVersion:2025-05-05
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21453?
CVE-2025-21453 is categorized as a high-severity vulnerability due to potential memory corruption issues.
How do I fix CVE-2025-21453?
To mitigate CVE-2025-21453, update the affected Qualcomm firmware to the latest version provided by the vendor.
Which Qualcomm products are affected by CVE-2025-21453?
CVE-2025-21453 affects various Qualcomm firmware, including Qualcomm 315 5G, APQ8017, AQT1000, and several other models.
What type of vulnerability is CVE-2025-21453?
CVE-2025-21453 is a memory corruption vulnerability that occurs when an iterator is accessed after removal.
Is there a workaround for CVE-2025-21453?
Currently, the best approach for CVE-2025-21453 is to apply the provided firmware updates from Qualcomm.