CVE-2025-21468

High

Description

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.

SeverityHigh
CVSS7.8
Exploit probability—
ProductQualcomm Ar8035 Firmware
PublishedMay 6, 2025
First seenMay 6, 2025

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm ar8035_firmwareNo range specified—
qualcomm csra6620_firmwareNo range specified—
qualcomm csra6640_firmwareNo range specified—
qualcomm fastconnect_6200_firmwareNo range specified—
qualcomm fastconnect_6700_firmwareNo range specified—
qualcomm wcd9380_firmwareNo range specified—
qualcomm wcd9385_firmwareNo range specified—
qualcomm wcd9390_firmwareNo range specified—
qualcomm wcd9395_firmwareNo range specified—
qualcomm wcn3910_firmwareNo range specified—
qualcomm wcn3950_firmwareNo range specified—
qualcomm wcn3980_firmwareNo range specified—
qualcomm wcn3988_firmwareNo range specified—
qualcomm wcn3990_firmwareNo range specified—
qualcomm wcn6450_firmwareNo range specified—
qualcomm wcn6650_firmwareNo range specified—
qualcomm wcn6740_firmwareNo range specified—
qualcomm wcn6755_firmwareNo range specified—
qualcomm wcn7750_firmwareNo range specified—
qualcomm qca6595_firmwareNo range specified—
qualcomm qca6595au_firmwareNo range specified—
qualcomm qca6696_firmwareNo range specified—
qualcomm qca6698aq_firmwareNo range specified—
qualcomm qca8081_firmwareNo range specified—
qualcomm qca8337_firmwareNo range specified—
qualcomm qca9377_firmwareNo range specified—
qualcomm qcm4490_firmwareNo range specified—
qualcomm qcm5430_firmwareNo range specified—
qualcomm qcm6490_firmwareNo range specified—
qualcomm qcm8550_firmwareNo range specified—
qualcomm qcn6024_firmwareNo range specified—
qualcomm qcn9011_firmwareNo range specified—
qualcomm qcn9012_firmwareNo range specified—
qualcomm qcn9024_firmwareNo range specified—
qualcomm qcn9274_firmwareNo range specified—
qualcomm qcs410_firmwareNo range specified—
qualcomm qcs4490_firmwareNo range specified—
qualcomm qcs5430_firmwareNo range specified—
qualcomm qcs610_firmwareNo range specified—
qualcomm qcs615_firmwareNo range specified—
qualcomm qcs6490_firmwareNo range specified—
qualcomm qcs7230_firmwareNo range specified—
qualcomm qcs8250_firmwareNo range specified—
qualcomm qcs8300_firmwareNo range specified—
qualcomm qcs8550_firmwareNo range specified—
qualcomm qcs9100_firmwareNo range specified—
qualcomm qmp1000_firmwareNo range specified—
qualcomm qrb5165m_firmwareNo range specified—
qualcomm qrb5165n_firmwareNo range specified—
qualcomm qsm8350_firmwareNo range specified—
qualcomm video_collaboration_vc1_platform_firmwareNo range specified—
qualcomm video_collaboration_vc3_platform_firmwareNo range specified—
qualcomm qca6574au_firmwareNo range specified—
qualcomm qca6574a_firmwareNo range specified—
qualcomm qca6574_firmwareNo range specified—
qualcomm qca6564au_firmwareNo range specified—
qualcomm qca6564a_firmwareNo range specified—
qualcomm qca6391_firmwareNo range specified—
qualcomm qca6174a_firmwareNo range specified—
qualcomm qam8295p_firmwareNo range specified—
qualcomm mdm9628_firmwareNo range specified—
qualcomm flight_rb5_5g_firmwareNo range specified—
qualcomm fastconnect_7800_firmwareNo range specified—
qualcomm fastconnect_6900_firmwareNo range specified—
qualcomm wsa8845h_firmwareNo range specified—
qualcomm wsa8845_firmwareNo range specified—
qualcomm wsa8840_firmwareNo range specified—
qualcomm wsa8835_firmwareNo range specified—
qualcomm wsa8832_firmwareNo range specified—
qualcomm wsa8830_firmwareNo range specified—
qualcomm wsa8815_firmwareNo range specified—
qualcomm wsa8810_firmwareNo range specified—
qualcomm wcn7881_firmwareNo range specified—
qualcomm wcn7880_firmwareNo range specified—
qualcomm wcn7861_firmwareNo range specified—
qualcomm wcn7860_firmwareNo range specified—
qualcomm video_collaboration_vc5_platform_firmwareNo range specified—
qualcomm robotics_rb2_firmwareNo range specified—
qualcomm robotics_rb5_firmwareNo range specified—
qualcomm sa4150p_firmwareNo range specified—
qualcomm sa4155p_firmwareNo range specified—
qualcomm sa6145p_firmwareNo range specified—
qualcomm sa6150p_firmwareNo range specified—
qualcomm sa6155p_firmwareNo range specified—
qualcomm sa8145p_firmwareNo range specified—
qualcomm sa8150p_firmwareNo range specified—
qualcomm sa8155p_firmwareNo range specified—
qualcomm sa8195p_firmwareNo range specified—
qualcomm sa8295p_firmwareNo range specified—
qualcomm sa8530p_firmwareNo range specified—
qualcomm sa8540p_firmwareNo range specified—
qualcomm sa9000p_firmwareNo range specified—
qualcomm sd_8_gen1_5g_firmwareNo range specified—
qualcomm sd888_firmwareNo range specified—
qualcomm sdx61_firmwareNo range specified—
qualcomm sg8275p_firmwareNo range specified—
qualcomm sm6370_firmwareNo range specified—
qualcomm sm6650_firmwareNo range specified—
qualcomm sm6650p_firmwareNo range specified—
qualcomm sm7315_firmwareNo range specified—
qualcomm sm7325p_firmwareNo range specified—
qualcomm sm7635_firmwareNo range specified—
qualcomm sm7675_firmwareNo range specified—
qualcomm sm7675p_firmwareNo range specified—
qualcomm sm8550p_firmwareNo range specified—
qualcomm sm8635_firmwareNo range specified—
qualcomm sm8635p_firmwareNo range specified—
qualcomm sm8650q_firmwareNo range specified—
qualcomm sm8735_firmwareNo range specified—
qualcomm sm8750_firmwareNo range specified—
qualcomm sm8750p_firmwareNo range specified—
qualcomm smart_audio_400_firmwareNo range specified—
qualcomm snapdragon_4_gen_1_mobile_firmwareNo range specified—
qualcomm snapdragon_4_gen_2_mobile_firmwareNo range specified—
qualcomm snapdragon_480_5g_mobile_firmwareNo range specified—
qualcomm snapdragon_480\+_5g_mobile_firmwareNo range specified—
qualcomm snapdragon_695_5g_mobile_firmwareNo range specified—
qualcomm snapdragon_778g_5g_mobile_firmwareNo range specified—
qualcomm snapdragon_778g\+_5g_mobile_firmwareNo range specified—
qualcomm snapdragon_780g_5g_mobile_firmwareNo range specified—
qualcomm snapdragon_782g_mobile_firmwareNo range specified—
qualcomm snapdragon_7c\+_gen_3_compute_firmwareNo range specified—
qualcomm snapdragon_8_gen_1_mobile_firmwareNo range specified—
qualcomm snapdragon_8_gen_2_mobile_firmwareNo range specified—
qualcomm snapdragon_8_gen_3_mobile_firmwareNo range specified—
qualcomm snapdragon_8\+_gen_1_mobile_firmwareNo range specified—
qualcomm snapdragon_8\+_gen_2_mobile_firmwareNo range specified—
qualcomm snapdragon_888_5g_mobile_firmwareNo range specified—
qualcomm snapdragon_888\+_5g_mobile_firmwareNo range specified—
qualcomm snapdragon_ar1_gen_1_firmwareNo range specified—
qualcomm snapdragon_ar2_gen_1_firmwareNo range specified—
qualcomm snapdragon_auto_5g_modem-rf_firmwareNo range specified—
qualcomm snapdragon_w5\+_gen_1_wearable_firmwareNo range specified—
qualcomm snapdragon_x12_lte_modem_firmwareNo range specified—
qualcomm snapdragon_x62_5g_modem-rf_firmwareNo range specified—
qualcomm snapdragon_x65_5g_modem-rf_firmwareNo range specified—
qualcomm ssg2115p_firmwareNo range specified—
qualcomm ssg2125p_firmwareNo range specified—
qualcomm sw5100_firmwareNo range specified—
qualcomm sw5100p_firmwareNo range specified—
qualcomm sxr1230p_firmwareNo range specified—
qualcomm sxr2230p_firmwareNo range specified—
qualcomm sxr2250p_firmwareNo range specified—
qualcomm sxr2330p_firmwareNo range specified—
qualcomm talynplus_firmwareNo range specified—
qualcomm vision_intelligence_400_firmwareNo range specified—
qualcomm wcd9335_firmwareNo range specified—
qualcomm wcd9341_firmwareNo range specified—
qualcomm wcd9370_firmwareNo range specified—
qualcomm wcd9375_firmwareNo range specified—
qualcomm wcd9378_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.