CVE-2025-21460: Improper Input Validation in Automotive Software platform based on QNX
Published May 6, 2025
·Updated
Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously.
Affected Software
72 affected components
All of the following
QUALCOMM Qam8255p Firmware
QUALCOMM Qam8255p
All of the following
QUALCOMM Qam8295p Firmware
QUALCOMM Qam8295p
All of the following
QUALCOMM Qam8620p Firmware
QUALCOMM Qam8620p
All of the following
QUALCOMM Qam8650p Firmware
QUALCOMM Qam8650p
All of the following
QUALCOMM Qam8775p Firmware
QUALCOMM Qam8775p
All of the following
QUALCOMM Qamsrv1h Firmware
QUALCOMM Qamsrv1h
All of the following
QUALCOMM Qamsrv1m Firmware
QUALCOMM Qamsrv1m
All of the following
QUALCOMM Qca6574a Firmware
QUALCOMM Qca6574a
All of the following
Qualcomm Qca6574au Firmware
QUALCOMM QCA6574AU
All of the following
QUALCOMM Qca6595 Firmware
QUALCOMM Qca6595
All of the following
QUALCOMM Qca6595au Firmware
QUALCOMM Qca6595au
All of the following
QUALCOMM Qca6688aq Firmware
QUALCOMM Qca6688aq
All of the following
QUALCOMM Qca6696 Firmware
QUALCOMM Qca6696
All of the following
QUALCOMM Qca6698aq Firmware
QUALCOMM Qca6698aq
All of the following
QUALCOMM Sa6145p Firmware
QUALCOMM Sa6145p
All of the following
QUALCOMM Sa6150p Firmware
QUALCOMM Sa6150p
All of the following
QUALCOMM Sa6155 Firmware
QUALCOMM Sa6155
All of the following
QUALCOMM Sa6155p Firmware
QUALCOMM Sa6155p
All of the following
QUALCOMM Sa7255p Firmware
QUALCOMM Sa7255p
All of the following
QUALCOMM Sa7775p Firmware
QUALCOMM Sa7775p
All of the following
QUALCOMM Sa8145p Firmware
QUALCOMM Sa8145p
All of the following
QUALCOMM Sa8150p Firmware
Qualcomm Sa8150p
All of the following
QUALCOMM Sa8155 Firmware
QUALCOMM Sa8155
All of the following
QUALCOMM Sa8155p Firmware
QUALCOMM Sa8155p
All of the following
QUALCOMM Sa8195p Firmware
QUALCOMM Sa8195p
All of the following
QUALCOMM Sa8255p Firmware
QUALCOMM Sa8255p
All of the following
QUALCOMM Sa8295p Firmware
QUALCOMM Sa8295p
All of the following
QUALCOMM Sa8540p Firmware
QUALCOMM Sa8540p
All of the following
QUALCOMM Sa8620p Firmware
QUALCOMM Sa8620p
All of the following
QUALCOMM Sa8650p Firmware
QUALCOMM Sa8650p
All of the following
QUALCOMM Sa8770p Firmware
QUALCOMM Sa8770p
All of the following
QUALCOMM Sa8775p Firmware
QUALCOMM Sa8775p
All of the following
QUALCOMM Sa9000p Firmware
QUALCOMM Sa9000p
All of the following
QUALCOMM Srv1h Firmware
QUALCOMM Srv1h
All of the following
QUALCOMM Srv1l Firmware
QUALCOMM Srv1l
All of the following
QUALCOMM Srv1m Firmware
QUALCOMM Srv1m
Event History
May 6, 2025
CVE Published
via MITRE·08:32 AM
Data Sourced
via MITRE·08:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-21460?
The severity of CVE-2025-21460 is classified as high due to its potential for memory corruption in guest VMs.
2
How do I fix CVE-2025-21460?
To fix CVE-2025-21460, apply the latest firmware updates provided by Qualcomm for the affected devices.
3
Which devices are affected by CVE-2025-21460?
CVE-2025-21460 affects various Qualcomm firmware models including the QAM8255P, QAM8295P, and several others.
4
What type of attack does CVE-2025-21460 enable?
CVE-2025-21460 could enable remote attackers to leverage memory corruption to execute arbitrary code on affected devices.
5
Is CVE-2025-21460 being actively exploited?
As of now, there have been no public reports indicating that CVE-2025-21460 is actively being exploited in the wild.