CVE-2025-21485

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

State: Published
Severity: 7.8 High
Published: Jun 3, 2025
Updated: Feb 26, 2026
Reserved: Dec 18, 2024

Description

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	FastConnect 6900Affected FastConnect 7800Affected QMP1000Affected SM8735Affected SM8750Affected SM8750PAffected Snapdragon 8 Gen 3 Mobile PlatformAffected Snapdragon W5+ Gen 1 Wearable PlatformAffected SW5100Affected SW5100PAffected SXR2230PAffected SXR2250PAffected SXR2330PAffected WCD9378Affected WCD9380Affected WCD9385Affected WCD9390Affected WCD9395Affected WCN7750Affected WCN7860Affected WCN7861Affected WCN7880Affected WCN7881Affected WSA8830Affected WSA8832Affected and 4 more versions

Product

Versions

SnapdragonQualcomm, Inc.

FastConnect 6900Affected
FastConnect 7800Affected
QMP1000Affected
SM8735Affected
SM8750Affected
SM8750PAffected
Snapdragon 8 Gen 3 Mobile PlatformAffected
Snapdragon W5+ Gen 1 Wearable PlatformAffected
SW5100Affected
SW5100PAffected
SXR2230PAffected
SXR2250PAffected
SXR2330PAffected
WCD9378Affected
WCD9380Affected
WCD9385Affected
WCD9390Affected
WCD9395Affected
WCN7750Affected
WCN7860Affected
WCN7861Affected
WCN7880Affected
WCN7881Affected
WSA8830Affected
WSA8832Affected
and 4 more versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.