CVE-2025-21476

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21476
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs6490:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs8550:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:qcs9100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs9100:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:sg8275_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sg8275:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:sg8275p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sg8275p:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:sm6650_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm6650:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:sm7635_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7635:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:sm7675_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7675:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:sm7675p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7675p:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:sm8550_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8550:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8550p:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:sm8635_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8635:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:sm8635p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8635p:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:qualcomm:sm8650_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8650:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:qualcomm:sm8650p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8650p:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:qualcomm:sm8650q_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8650q:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:qualcomm:sm8750_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8750:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:qualcomm:sm8750p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8750p:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:qualcomm:sxr2330p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sxr2330p:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:qualcomm:qcn9011_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn9011:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn9012:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:qualcomm:qcn9274_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn9274:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:qualcomm:wcn3910_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3910:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:qualcomm:wcn6650_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6650:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:qualcomm:wcn6750_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6750:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6755:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:qualcomm:wcn6855_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6855:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:qualcomm:wcn6856_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:qualcomm:wcn7850_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7850:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:qualcomm:wcn7851_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7851:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:qualcomm:qcm5430_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm5430:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm8550:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND
cpe:2.3:o:qualcomm:qcs5430_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs5430:-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND
cpe:2.3:o:qualcomm:qcs615_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs615:-:*:*:*:*:*:*:*
History

25 Sep 2025, 16:08

Type Values Removed Values Added
References () https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html - () https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html - Vendor Advisory
CPE cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8550p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8550_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7675p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sg8275p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcs9100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm7635_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn9011:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8750p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn6855_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6855:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn6856_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7850:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8550:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn6650_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7675:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs6490:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8635p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8750:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7635:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6755:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn7850_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcn9011_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3910:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn7851_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8650q_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sg8275_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs615:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8650p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8650p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8635p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn9274:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcs615_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm7675p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8650q:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm8550:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm5430:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3910_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8650:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs8550:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm7675_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcn9274_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm6650:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn6750_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sg8275p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs9100:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn7851:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8650_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sxr2330p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn9012:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcs5430:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcs5430_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm6650_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sg8275:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcm5430_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8635_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6750:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sxr2330p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8750p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6650:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8750_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8635:-:*:*:*:*:*:*:*
First Time Qualcomm sm8550 Firmware
Qualcomm wcn3950
Qualcomm wcn7850 Firmware
Qualcomm qcm6490 Firmware
Qualcomm sm8550p Firmware
Qualcomm wcn7881 Firmware
Qualcomm qca6698aq
Qualcomm wcn6755 Firmware
Qualcomm qcn9274
Qualcomm qca6698aq Firmware
Qualcomm sm7675p
Qualcomm sxr2330p Firmware
Qualcomm wcn7851
Qualcomm sg8275p Firmware
Qualcomm qcs6490
Qualcomm sm8650
Qualcomm qcs9100
Qualcomm sm8650q
Qualcomm sm8635
Qualcomm wcn6755
Qualcomm qcs9100 Firmware
Qualcomm sxr2330p
Qualcomm sm8750p
Qualcomm qcm6490
Qualcomm sm7635
Qualcomm wcn6650 Firmware
Qualcomm wcn6750
Qualcomm sm6650 Firmware
Qualcomm qcn9274 Firmware
Qualcomm sm7635 Firmware
Qualcomm sm8750
Qualcomm qcs615 Firmware
Qualcomm sm8650p Firmware
Qualcomm qcm8550 Firmware
Qualcomm wcn7880 Firmware
Qualcomm qcn9011 Firmware
Qualcomm qcm5430 Firmware
Qualcomm sm7675p Firmware
Qualcomm sg8275p
Qualcomm wcn7881
Qualcomm sm8750p Firmware
Qualcomm qcs5430
Qualcomm wcn6856 Firmware
Qualcomm wcn7850
Qualcomm sm8650q Firmware
Qualcomm wcn6750 Firmware
Qualcomm wcn6855 Firmware
Qualcomm sm8650p
Qualcomm sm7675
Qualcomm wcn7861
Qualcomm qcs8550 Firmware
Qualcomm wcn7861 Firmware
Qualcomm sg8275 Firmware
Qualcomm qcn9012
Qualcomm wcn7880
Qualcomm sm6650
Qualcomm qcs5430 Firmware
Qualcomm wcn3910 Firmware
Qualcomm sm8650 Firmware
Qualcomm wcn3910
Qualcomm wcn6855
Qualcomm wcn3950 Firmware
Qualcomm qcm5430
Qualcomm sm7675 Firmware
Qualcomm wcn6650
Qualcomm wcn7860
Qualcomm sm8635 Firmware
Qualcomm
Qualcomm sm8750 Firmware
Qualcomm qcn9011
Qualcomm qcs8550
Qualcomm qcs6490 Firmware
Qualcomm wcn6856
Qualcomm qcs615
Qualcomm sm8550p
Qualcomm qca6391
Qualcomm sm8635p Firmware
Qualcomm sm8635p
Qualcomm qcm8550
Qualcomm sg8275
Qualcomm sm8550
Qualcomm wcn7851 Firmware
Qualcomm qcn9012 Firmware
Qualcomm wcn7860 Firmware
Qualcomm qca6391 Firmware

24 Sep 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-09-24 16:15

Updated : 2025-09-25 16:08

NVD link : CVE-2025-21476

Mitre link : CVE-2025-21476

CVE.ORG link : CVE-2025-21476

JSON object : View

Products Affected

qualcomm

  • qcm6490_firmware
  • wcn3910
  • sm8550_firmware
  • sxr2330p
  • wcn6855_firmware
  • qcm6490
  • sm8650q
  • qcn9274
  • sm7675_firmware
  • qca6391
  • sxr2330p_firmware
  • sg8275p_firmware
  • wcn6856_firmware
  • wcn7881
  • sm8650
  • qca6698aq
  • sm8550
  • sm8750p
  • wcn7860
  • wcn6855
  • sg8275_firmware
  • sm6650_firmware
  • sm8550p
  • wcn6750
  • wcn3950_firmware
  • qcn9011_firmware
  • sm7635
  • sm8650p_firmware
  • wcn7860_firmware
  • qcn9012_firmware
  • sm8750p_firmware
  • sm8635p_firmware
  • sm8650q_firmware
  • wcn6650_firmware
  • sm7635_firmware
  • qcn9011
  • qcs615
  • wcn7851
  • qcs6490_firmware
  • sm7675
  • sm7675p
  • qca6698aq_firmware
  • wcn7850
  • qcn9274_firmware
  • qca6391_firmware
  • wcn7861
  • sm8550p_firmware
  • wcn6650
  • sm7675p_firmware
  • wcn3910_firmware
  • qcs9100
  • sm8635_firmware
  • qcm5430
  • sm8650_firmware
  • wcn7851_firmware
  • wcn6755_firmware
  • qcs5430_firmware
  • qcs5430
  • qcn9012
  • qcs6490
  • wcn7861_firmware
  • sm6650
  • qcm8550
  • qcs8550
  • wcn7881_firmware
  • qcm5430_firmware
  • wcn3950
  • sm8635p
  • wcn6755
  • sm8650p
  • wcn7880
  • wcn7880_firmware
  • qcm8550_firmware
  • sm8750_firmware
  • qcs615_firmware
  • wcn6856
  • wcn6750_firmware
  • sm8750
  • qcs8550_firmware
  • wcn7850_firmware
  • qcs9100_firmware
  • sm8635
  • sg8275
  • sg8275p
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')