CVE-2025-21485: Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Published Jun 2, 2025
·Updated
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.
Affected Software
59 affected components
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Qmp1000 Firmware
Qualcomm Qmp1000
All of the following
Qualcomm Sm8735 Firmware
Qualcomm Sm8735
All of the following
Qualcomm Sm8750 Firmware
Qualcomm Sm8750
All of the following
Qualcomm Sm8750p Firmware
Qualcomm Sm8750p
All of the following
Qualcomm Snapdragon 8 Gen 3 Mobile Platform Firmware
Qualcomm Snapdragon 8 Gen 3 Mobile Platform
All of the following
Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform Firmware
Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform
All of the following
Qualcomm Sw5100 Firmware
Qualcomm Sw5100
All of the following
Qualcomm Sw5100p Firmware
Qualcomm Sw5100p
All of the following
Qualcomm Sxr2230p Firmware
Qualcomm Sxr2230p
All of the following
Qualcomm Sxr2250p Firmware
Qualcomm Sxr2250p
All of the following
Qualcomm Sxr2330p Firmware
Qualcomm Sxr2330p
All of the following
Qualcomm Wcd9378 Firmware
Qualcomm Wcd9378
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wcd9390 Firmware
Qualcomm Wcd9390
All of the following
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
All of the following
Qualcomm Wcn7750 Firmware
Qualcomm Wcn7750
All of the following
Qualcomm Wcn7860 Firmware
Qualcomm Wcn7860
All of the following
Qualcomm Wcn7861 Firmware
Qualcomm Wcn7861
All of the following
Qualcomm Wcn7880 Firmware
Qualcomm Wcn7880
All of the following
Qualcomm Wcn7881 Firmware
Qualcomm Wcn7881
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Google Android
Event History
Jun 2, 2025
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Jun 3, 2025
CVE Published
via MITRE·05:53 AM
Data Sourced
via MITRE·05:53 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-21485?
CVE-2025-21485 has a high severity rating due to the potential for memory corruption.
2
How do I fix CVE-2025-21485?
To fix CVE-2025-21485, you should update to the latest firmware version provided by Qualcomm.
3
What products are affected by CVE-2025-21485?
CVE-2025-21485 affects various Qualcomm Fastconnect firmware versions, including Fastconnect 6900 and 7800.
4
What impacts could CVE-2025-21485 have on my system?
CVE-2025-21485 could potentially allow attackers to execute arbitrary code on affected systems.
5
Is CVE-2025-21485 related to Android devices?
Yes, CVE-2025-21485 is associated with Qualcomm firmware used in Android devices.