CVE-2025-21429
HIGHDescription
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
Is your site exposed to CVE-2025-21429?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | sa9000p_firmware |
| qualcomm | sa9000p |
| qualcomm | sd626_firmware |
| qualcomm | sd626 |
| qualcomm | sd660_firmware |
| qualcomm | sd660 |
| qualcomm | sd670_firmware |
| qualcomm | sd670 |
| qualcomm | sd730_firmware |
| qualcomm | sd730 |
| qualcomm | sd855_firmware |
| qualcomm | sd855 |
| qualcomm | sd865_5g_firmware |
| qualcomm | sd865_5g |
| qualcomm | sdm429w_firmware |
| qualcomm | sdm429w |
| qualcomm | sdx55_firmware |
| qualcomm | sdx55 |
| qualcomm | sdx61_firmware |
| qualcomm | sdx61 |
| qualcomm | sm4125_firmware |
| qualcomm | sm4125 |
| qualcomm | sm6250_firmware |
| qualcomm | sm6250 |
| qualcomm | sm6370_firmware |
| qualcomm | sm6370 |
| qualcomm | smart_audio_200_platform_firmware |
| qualcomm | smart_audio_200_platform |
| qualcomm | smart_audio_400_platform_firmware |
| qualcomm | smart_audio_400_platform |
| qualcomm | smart_display_200_platform_firmware |
| qualcomm | smart_display_200_platform |
| qualcomm | snapdragon_1200_wearable_platform_firmware |
| qualcomm | snapdragon_1200_wearable_platform |
| qualcomm | snapdragon_210_processor_firmware |
| qualcomm | snapdragon_210_processor |
| qualcomm | snapdragon_212_mobile_platform_firmware |
| qualcomm | snapdragon_212_mobile_platform |
| qualcomm | snapdragon_4_gen_1_mobile_platform_firmware |
| qualcomm | snapdragon_4_gen_1_mobile_platform |
| qualcomm | snapdragon_429_mobile_platform_firmware |
| qualcomm | snapdragon_429_mobile_platform |
| qualcomm | snapdragon_460_mobile_platform_firmware |
| qualcomm | snapdragon_460_mobile_platform |
| qualcomm | snapdragon_480_5g_mobile_platform_firmware |
| qualcomm | snapdragon_480_5g_mobile_platform |
| qualcomm | snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware |
| qualcomm | snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\) |
| qualcomm | snapdragon_625_mobile_platform_firmware |
| qualcomm | snapdragon_625_mobile_platform |
| qualcomm | snapdragon_626_mobile_platform_firmware |
| qualcomm | snapdragon_626_mobile_platform |
| qualcomm | snapdragon_660_mobile_platform_firmware |
| qualcomm | snapdragon_660_mobile_platform |
| qualcomm | snapdragon_662_mobile_platform_firmware |
| qualcomm | snapdragon_662_mobile_platform |
| qualcomm | snapdragon_670_mobile_platform_firmware |
| qualcomm | snapdragon_670_mobile_platform |
| qualcomm | snapdragon_675_mobile_platform_firmware |
| qualcomm | snapdragon_675_mobile_platform |
| qualcomm | snapdragon_678_mobile_platform_\(sm6150-ac\)_firmware |
| qualcomm | snapdragon_678_mobile_platform_\(sm6150-ac\) |
| qualcomm | snapdragon_680_4g_mobile_platform_firmware |
| qualcomm | snapdragon_680_4g_mobile_platform |
| qualcomm | snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware |
| qualcomm | snapdragon_685_4g_mobile_platform_\(sm6225-ad\) |
| qualcomm | snapdragon_695_5g_mobile_platform_firmware |
| qualcomm | snapdragon_695_5g_mobile_platform |
| qualcomm | snapdragon_710_mobile_platform_firmware |
| qualcomm | snapdragon_710_mobile_platform |
| qualcomm | snapdragon_720g_mobile_platform_firmware |
| qualcomm | snapdragon_720g_mobile_platform |
| qualcomm | snapdragon_730_mobile_platform_\(sm7150-aa\)_firmware |
| qualcomm | snapdragon_730_mobile_platform_\(sm7150-aa\) |
| qualcomm | snapdragon_730g_mobile_platform_\(sm7150-ab\)_firmware |
| qualcomm | snapdragon_730g_mobile_platform_\(sm7150-ab\) |
| qualcomm | snapdragon_732g_mobile_platform_\(sm7150-ac\)_firmware |
| qualcomm | snapdragon_732g_mobile_platform_\(sm7150-ac\) |
| qualcomm | snapdragon_8_gen_3_mobile_platform_firmware |
| qualcomm | snapdragon_8_gen_3_mobile_platform |
| qualcomm | 9206_lte_modem_firmware |
| qualcomm | 9206_lte_modem |
| qualcomm | apq8017_firmware |
| qualcomm | apq8017 |
| qualcomm | apq8064au_firmware |
| qualcomm | apq8064au |
| qualcomm | aqt1000_firmware |
| qualcomm | aqt1000 |
| qualcomm | ar8035_firmware |
| qualcomm | ar8035 |
| qualcomm | c-v2x_9150_firmware |
| qualcomm | c-v2x_9150 |
| qualcomm | csra6620_firmware |
| qualcomm | csra6620 |
| qualcomm | csra6640_firmware |
| qualcomm | csra6640 |
| qualcomm | csrb31024_firmware |
| qualcomm | csrb31024 |
| qualcomm | fastconnect_6200_firmware |
| qualcomm | fastconnect_6200 |
| qualcomm | fastconnect_6700_firmware |
| qualcomm | fastconnect_6700 |
| qualcomm | fastconnect_6800_firmware |
| qualcomm | fastconnect_6800 |
| qualcomm | fastconnect_6900_firmware |
| qualcomm | fastconnect_6900 |
| qualcomm | fastconnect_7800_firmware |
| qualcomm | fastconnect_7800 |
| qualcomm | mdm9250_firmware |
| qualcomm | mdm9250 |
| qualcomm | mdm9628_firmware |
| qualcomm | mdm9628 |
| qualcomm | mdm9640_firmware |
| qualcomm | mdm9640 |
| qualcomm | mdm9650_firmware |
| qualcomm | mdm9650 |
| qualcomm | msm8996au_firmware |
| qualcomm | msm8996au |
| qualcomm | qam8255p_firmware |
| qualcomm | qam8255p |
| qualcomm | qam8650p_firmware |
| qualcomm | qam8650p |
| qualcomm | qam8775p_firmware |
| qualcomm | qam8775p |
| qualcomm | qca6174a_firmware |
| qualcomm | qca6174a |
| qualcomm | qca6175a_firmware |
| qualcomm | qca6175a |
| qualcomm | qca6391_firmware |
| qualcomm | qca6391 |
| qualcomm | qca6420_firmware |
| qualcomm | qca6420 |
| qualcomm | qca6421_firmware |
| qualcomm | qca6421 |
| qualcomm | qca6426_firmware |
| qualcomm | qca6426 |
| qualcomm | qca6430_firmware |
| qualcomm | qca6430 |
| qualcomm | qca6431_firmware |
| qualcomm | qca6431 |
| qualcomm | qca6436_firmware |
| qualcomm | qca6436 |
| qualcomm | qca6554a_firmware |
| qualcomm | qca6554a |
| qualcomm | qca6564_firmware |
| qualcomm | qca6564 |
| qualcomm | qca6564a_firmware |
| qualcomm | qca6564a |
| qualcomm | qca6564au_firmware |
| qualcomm | qca6564au |
| qualcomm | qca6574_firmware |
| qualcomm | qca6574 |
| qualcomm | qca6574a_firmware |
| qualcomm | qca6574a |
| qualcomm | qca6574au_firmware |
| qualcomm | qca6574au |
| qualcomm | qca6584au_firmware |
| qualcomm | qca6584au |
| qualcomm | qca6595_firmware |
| qualcomm | qca6595 |
| qualcomm | qca6595au_firmware |
| qualcomm | qca6595au |
| qualcomm | qca6678aq_firmware |
| qualcomm | qca6678aq |
| qualcomm | qca6696_firmware |
| qualcomm | qca6696 |
| qualcomm | qca6698aq_firmware |
| qualcomm | qca6698aq |
| qualcomm | qca6777aq_firmware |
| qualcomm | qca6777aq |
| qualcomm | wcn3615_firmware |
| qualcomm | wcn3615 |
| qualcomm | wcn3620_firmware |
| qualcomm | wcn3620 |
| qualcomm | wcn3660b_firmware |
| qualcomm | wcn3660b |
| qualcomm | wcn3680b_firmware |
| qualcomm | wcn3680b |
| qualcomm | wcn3910_firmware |
| qualcomm | wcn3910 |
| qualcomm | wcn3950_firmware |
| qualcomm | wcn3950 |
| qualcomm | wcn3980_firmware |
| qualcomm | wcn3980 |
| qualcomm | wcn3988_firmware |
| qualcomm | wcn3988 |
| qualcomm | wcn3990_firmware |
| qualcomm | wcn3990 |
| qualcomm | wsa8810_firmware |
| qualcomm | wsa8810 |
| qualcomm | wsa8815_firmware |
| qualcomm | wsa8815 |
| qualcomm | wsa8830_firmware |
| qualcomm | wsa8830 |
| qualcomm | wsa8832_firmware |
| qualcomm | wsa8832 |
| qualcomm | wsa8835_firmware |
| qualcomm | wsa8835 |
| qualcomm | wsa8840_firmware |
| qualcomm | wsa8840 |
| qualcomm | wsa8845_firmware |
| qualcomm | wsa8845 |
| qualcomm | wsa8845h_firmware |
| qualcomm | wsa8845h |
| qualcomm | qca6787aq_firmware |
| qualcomm | qca6787aq |
| qualcomm | qca6797aq_firmware |
| qualcomm | qca6797aq |
| qualcomm | qca8081_firmware |
| qualcomm | qca8081 |
| qualcomm | qca8337_firmware |
| qualcomm | qca8337 |
| qualcomm | qca9367_firmware |
| qualcomm | qca9367 |
| qualcomm | qca9377_firmware |
| qualcomm | qca9377 |
| qualcomm | qcc2073_firmware |
| qualcomm | qcc2073 |
| qualcomm | qcc2076_firmware |
| qualcomm | qcc2076 |
| qualcomm | qcm2290_firmware |
| qualcomm | qcm2290 |
| qualcomm | qcm4290_firmware |
| qualcomm | qcm4290 |
| qualcomm | qcm5430_firmware |
| qualcomm | qcm5430 |
| qualcomm | qcm6125_firmware |
| qualcomm | qcm6125 |
| qualcomm | qcm6490_firmware |
| qualcomm | qcm6490 |
| qualcomm | qcn6024_firmware |
| qualcomm | qcn6024 |
| qualcomm | qcn9024_firmware |
| qualcomm | qcn9024 |
| qualcomm | qcn9074_firmware |
| qualcomm | qcn9074 |
| qualcomm | qcs2290_firmware |
| qualcomm | qcs2290 |
| qualcomm | qcs410_firmware |
| qualcomm | qcs410 |
| qualcomm | qcs4290_firmware |
| qualcomm | qcs4290 |
| qualcomm | qcs5430_firmware |
| qualcomm | qcs5430 |
| qualcomm | qcs610_firmware |
| qualcomm | qcs610 |
| qualcomm | qcs6125_firmware |
| qualcomm | qcs6125 |
| qualcomm | qcs6490_firmware |
| qualcomm | qcs6490 |
| qualcomm | qualcomm_205_mobile_platform_firmware |
| qualcomm | qualcomm_205_mobile_platform |
| qualcomm | video_collaboration_vc1_platform_firmware |
| qualcomm | video_collaboration_vc1_platform |
| qualcomm | video_collaboration_vc3_platform_firmware |
| qualcomm | video_collaboration_vc3_platform |
| qualcomm | sa2150p_firmware |
| qualcomm | sa2150p |
| qualcomm | sa4150p_firmware |
| qualcomm | sa4150p |
| qualcomm | sa4155p_firmware |
| qualcomm | sa4155p |
| qualcomm | sa6145p_firmware |
| qualcomm | sa6145p |
| qualcomm | sa6150p_firmware |
| qualcomm | sa6150p |
| qualcomm | sa6155_firmware |
| qualcomm | sa6155 |
| qualcomm | sa6155p_firmware |
| qualcomm | sa6155p |
| qualcomm | sa8145p_firmware |
| qualcomm | sa8145p |
| qualcomm | sa8150p_firmware |
| qualcomm | sa8150p |
| qualcomm | sa8155_firmware |
| qualcomm | sa8155 |
| qualcomm | sa8155p_firmware |
| qualcomm | sa8155p |
| qualcomm | sa8195p_firmware |
| qualcomm | sa8195p |
| qualcomm | sa8530p_firmware |
| qualcomm | sa8530p |
| qualcomm | sa8540p_firmware |
| qualcomm | sa8540p |
| qualcomm | snapdragon_8\+_gen_1_mobile_platform_firmware |
| qualcomm | snapdragon_8\+_gen_1_mobile_platform |
| qualcomm | snapdragon_820_automotive_platform_firmware |
| qualcomm | snapdragon_820_automotive_platform |
| qualcomm | snapdragon_855_mobile_platform_firmware |
| qualcomm | snapdragon_855_mobile_platform |
| qualcomm | snapdragon_855\+\/860_mobile_platform_\(sm8150-ac\)_firmware |
| qualcomm | snapdragon_855\+\/860_mobile_platform_\(sm8150-ac\) |
| qualcomm | snapdragon_865_5g_mobile_platform_firmware |
| qualcomm | snapdragon_865_5g_mobile_platform |
| qualcomm | snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmware |
| qualcomm | snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\) |
| qualcomm | snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmware |
| qualcomm | snapdragon_870_5g_mobile_platform_\(sm8250-ac\) |
| qualcomm | snapdragon_auto_5g_modem-rf_firmware |
| qualcomm | snapdragon_auto_5g_modem-rf |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2_firmware |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2 |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform_firmware |
| qualcomm | snapdragon_w5\+_gen_1_wearable_platform |
| qualcomm | snapdragon_x24_lte_modem_firmware |
| qualcomm | snapdragon_x24_lte_modem |
| qualcomm | snapdragon_x5_lte_modem_firmware |
| qualcomm | snapdragon_x5_lte_modem |
| qualcomm | snapdragon_x50_5g_modem-rf_system_firmware |
| qualcomm | snapdragon_x50_5g_modem-rf_system |
| qualcomm | snapdragon_x55_5g_modem-rf_system_firmware |
| qualcomm | snapdragon_x55_5g_modem-rf_system |
| qualcomm | snapdragon_x62_5g_modem-rf_system_firmware |
| qualcomm | snapdragon_x62_5g_modem-rf_system |
| qualcomm | snapdragon_x65_5g_modem-rf_system_firmware |
| qualcomm | snapdragon_x65_5g_modem-rf_system |
| qualcomm | snapdragon_xr1_platform_firmware |
| qualcomm | snapdragon_xr1_platform |
| qualcomm | snapdragon_xr2_5g_platform_firmware |
| qualcomm | snapdragon_xr2_5g_platform |
| qualcomm | snapdragon_xr2\+_gen_1_platform_firmware |
| qualcomm | snapdragon_xr2\+_gen_1_platform |
| qualcomm | snapdragon_auto_4g_modem_firmware |
| qualcomm | snapdragon_auto_4g_modem |
| qualcomm | sw5100_firmware |
| qualcomm | sw5100 |
| qualcomm | sw5100p_firmware |
| qualcomm | sw5100p |
| qualcomm | sxr1120_firmware |
| qualcomm | sxr1120 |
| qualcomm | sxr2130_firmware |
| qualcomm | sxr2130 |
| qualcomm | sxr2230p_firmware |
| qualcomm | sxr2230p |
| qualcomm | sxr2250p_firmware |
| qualcomm | sxr2250p |
| qualcomm | vision_intelligence_100_platform_\(apq8053-aa\)_firmware |
| qualcomm | vision_intelligence_100_platform_\(apq8053-aa\) |
| qualcomm | vision_intelligence_200_platform_\(apq8053-ac\)_firmware |
| qualcomm | vision_intelligence_200_platform_\(apq8053-ac\) |
| qualcomm | wcd9326_firmware |
| qualcomm | wcd9326 |
| qualcomm | wcd9330_firmware |
| qualcomm | wcd9330 |
| qualcomm | wcd9335_firmware |
| qualcomm | wcd9335 |
| qualcomm | wcd9341_firmware |
| qualcomm | wcd9341 |
| qualcomm | wcd9360_firmware |
| qualcomm | wcd9360 |
| qualcomm | wcd9370_firmware |
| qualcomm | wcd9370 |
| qualcomm | wcd9375_firmware |
| qualcomm | wcd9375 |
| qualcomm | wcd9380_firmware |
| qualcomm | wcd9380 |
| qualcomm | wcd9385_firmware |
| qualcomm | wcd9385 |
| qualcomm | wcd9390_firmware |
| qualcomm | wcd9390 |
| qualcomm | wcd9395_firmware |
| qualcomm | wcd9395 |
| qualcomm | wcn3610_firmware |
| qualcomm | wcn3610 |
References
Frequently Asked Questions
What is CVE-2025-21429? +
How severe is CVE-2025-21429? +
What products are affected by CVE-2025-21429? +
How do I check if I'm vulnerable to CVE-2025-21429? +
Related Vulnerabilities
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet …
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callback, …
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the …
BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain …