CVE-2025-21488

Buffer Over-read in Data Network Stack & Connectivity

State: Published
Severity: 8.2 High
Published: Sep 24, 2025
Updated: Sep 25, 2025
Reserved: Dec 18, 2024

Description

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

Scores

CVSS	Score	Vector	Source
3.1	8.2 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L	qualcomm

Weaknesses

CWE-126 Buffer Over-read

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	FastConnect 6200Affected FastConnect 6700Affected FastConnect 6900Affected FastConnect 7800Affected MSM8996AUAffected QCA6564Affected QCA6564AAffected QCA6564AUAffected QCA6574Affected QCA6574AAffected QCA6574AUAffected QCA6595AUAffected QCA6696Affected QCM4490Affected QCS410Affected QCS4490Affected QCS610Affected QMP1000Affected Qualcomm Video Collaboration VC1 PlatformAffected Qualcomm Video Collaboration VC3 PlatformAffected SA6145PAffected SA6155Affected SA6155PAffected SA8155Affected SA8155PAffected and 83 more versions

Product

Versions

SnapdragonQualcomm, Inc.

FastConnect 6200Affected
FastConnect 6700Affected
FastConnect 6900Affected
FastConnect 7800Affected
MSM8996AUAffected
QCA6564Affected
QCA6564AAffected
QCA6564AUAffected
QCA6574Affected
QCA6574AAffected
QCA6574AUAffected
QCA6595AUAffected
QCA6696Affected
QCM4490Affected
QCS410Affected
QCS4490Affected
QCS610Affected
QMP1000Affected
Qualcomm Video Collaboration VC1 PlatformAffected
Qualcomm Video Collaboration VC3 PlatformAffected
SA6145PAffected
SA6155Affected
SA6155PAffected
SA8155Affected
SA8155PAffected
and 83 more versions

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.