CVE-2025-21428
Buffer Over-read in WLAN Host
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Buffer Over-read in WLAN Host
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
- Record
CVE-2025-21428- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-126
- Updated
- 2026-11-03
EUVDEUVD-2025-10002
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
- Record
EUVD-2025-10002- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4rmv-m7cx-wvg4
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from...
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
- Record
GHSA-4rmv-m7cx-wvg4- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-126
- Updated
- 2026-11-02
NVD
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
- Record
CVE-2025-21428- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-126
- Updated
- 2026-11-02
Affected products
- qualcomm 9206 lte modem firmware
- qualcomm apq8017 firmware
- qualcomm ar8031 firmware
- qualcomm c-v2x 9150 firmware
- qualcomm csra6620 firmware
- qualcomm csra6640 firmware
- qualcomm fastconnect 6200 firmware
- qualcomm fastconnect 6900 firmware
- qualcomm mdm9250 firmware
- qualcomm mdm9628 firmware
- qualcomm mdm9640 firmware
- qualcomm mdm9650 firmware
Show 58 moreShow less
- qualcomm msm8996au firmware
- qualcomm qca6174 firmware
- qualcomm qca6174a firmware
- qualcomm qca6175a firmware
- qualcomm qca6554a firmware
- qualcomm qca6564a firmware
- qualcomm qca6564au firmware
- qualcomm qca6574 firmware
- qualcomm qca6574a firmware
- qualcomm qca6574au firmware
- qualcomm qca6584 firmware
- qualcomm qca6584au firmware
- qualcomm qca6595 firmware
- qualcomm qca6595au firmware
- qualcomm qca6696 firmware
- qualcomm qca9367 firmware
- qualcomm qca9377 firmware
- qualcomm qca9379 firmware
- qualcomm qcm2150 firmware
- qualcomm qep8111 firmware
- qualcomm 205 mobile platform firmware
- qualcomm 215 mobile platform firmware
- qualcomm sa2150p firmware
- qualcomm sd626 firmware
- qualcomm sdm429w firmware
- qualcomm smart audio 200 platform firmware
- qualcomm smart audio 400 platform firmware
- qualcomm smart display 200 platform \(apq5053-aa\) firmware
- qualcomm snapdragon 1200 wearable platform firmware
- qualcomm snapdragon 210 processor firmware
- qualcomm snapdragon 212 mobile platform firmware
- qualcomm snapdragon 425 mobile platform firmware
- qualcomm snapdragon 429 mobile platform firmware
- qualcomm snapdragon 439 mobile platform firmware
- qualcomm snapdragon 625 mobile platform firmware
- qualcomm snapdragon 626 mobile platform firmware
- qualcomm snapdragon 632 mobile platform firmware
- qualcomm snapdragon 820 automotive platform firmware
- qualcomm snapdragon auto 5g modem-rf firmware
- qualcomm snapdragon x12 lte modem firmware
- qualcomm snapdragon x35 5g modem-rf system firmware
- qualcomm snapdragon x5 lte modem firmware
- qualcomm vision intelligence 100 platform \(apq8053-aa\) firmware
- qualcomm vision intelligence 200 platform \(apq8053-ac\) firmware
- qualcomm wcd9326 firmware
- qualcomm wcd9330 firmware
- qualcomm wcd9335 firmware
- qualcomm wcd9340 firmware
- qualcomm wcn3610 firmware
- qualcomm wcn3615 firmware
- qualcomm wcn3620 firmware
- qualcomm wcn3660b firmware
- qualcomm wcn3680 firmware
- qualcomm wcn3680b firmware
- qualcomm wcn3980 firmware
- qualcomm wsa8810 firmware
- qualcomm wsa8815 firmware
- qualcomm, inc. snapdragon
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | CVE List, EUVD | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-21428 is a high vulnerability (CVSS 7.5) in Qualcomm 9206 Lte Modem Firmware, published April 7, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 18th percentile. No source names a fixed version.