CVE-2025-21455
HIGHDescription
Memory corruption while submitting blob data to kernel space though IOCTL.
Is your site exposed to CVE-2025-21455?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | fastconnect_6800_firmware |
| qualcomm | fastconnect_6800 |
| qualcomm | fastconnect_6900_firmware |
| qualcomm | fastconnect_6900 |
| qualcomm | fastconnect_7800_firmware |
| qualcomm | fastconnect_7800 |
| qualcomm | qca6391_firmware |
| qualcomm | qca6391 |
| qualcomm | qca6426_firmware |
| qualcomm | qca6426 |
| qualcomm | qca6436_firmware |
| qualcomm | qca6436 |
| qualcomm | qsm8250_firmware |
| qualcomm | qsm8250 |
| qualcomm | sd865_5g_firmware |
| qualcomm | sd865_5g |
| qualcomm | sdx55_firmware |
| qualcomm | sdx55 |
| qualcomm | snapdragon_8_gen_1_mobile_platform_firmware |
| qualcomm | snapdragon_8_gen_1_mobile_platform |
| qualcomm | snapdragon_865_5g_mobile_platform_firmware |
| qualcomm | snapdragon_865_5g_mobile_platform |
| qualcomm | snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmware |
| qualcomm | snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\) |
| qualcomm | snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmware |
| qualcomm | snapdragon_870_5g_mobile_platform_\(sm8250-ac\) |
| qualcomm | snapdragon_x55_5g_modem-rf_system_firmware |
| qualcomm | snapdragon_x55_5g_modem-rf_system |
| qualcomm | snapdragon_xr2_5g_platform_firmware |
| qualcomm | snapdragon_xr2_5g_platform |
| qualcomm | sw5100_firmware |
| qualcomm | sw5100 |
| qualcomm | sw5100p_firmware |
| qualcomm | sw5100p |
| qualcomm | sxr2130_firmware |
| qualcomm | sxr2130 |
| qualcomm | sxr2230p_firmware |
| qualcomm | sxr2230p |
| qualcomm | sxr2250p_firmware |
| qualcomm | sxr2250p |
| qualcomm | wcd9380_firmware |
| qualcomm | wcd9380 |
| qualcomm | wcd9385_firmware |
| qualcomm | wcd9385 |
| qualcomm | wcn3980_firmware |
| qualcomm | wcn3980 |
| qualcomm | wcn3988_firmware |
| qualcomm | wcn3988 |
| qualcomm | wsa8810_firmware |
| qualcomm | wsa8810 |
| qualcomm | wsa8815_firmware |
| qualcomm | wsa8815 |
| qualcomm | wsa8830_firmware |
| qualcomm | wsa8830 |
| qualcomm | wsa8832_firmware |
| qualcomm | wsa8832 |
| qualcomm | wsa8835_firmware |
| qualcomm | wsa8835 |
References
Frequently Asked Questions
What is CVE-2025-21455? +
How severe is CVE-2025-21455? +
What products are affected by CVE-2025-21455? +
How do I check if I'm vulnerable to CVE-2025-21455? +
Related Vulnerabilities
When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations …
MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a server-side request forgery (SSRF) …
Duende.AccessTokenManagement is a set of .NET libraries that manage OAuth and OpenId Connect access tokens. Duende.AccessTokenManagement contains a race condition …
A time-of-check time-of-use (TOCTOU) race condition vulnerability has been reported to affect several product versions. If exploited, the vulnerability could …
conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting. In versions prior to 2025.4.10, a race …
The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at …