Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2025-21458 Details
Description
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
A use-after-free vulnerability has been identified in various chipsets of Qualcomm Snapdragon products. This vulnerability leads to memory corruption when the IOCTL interface is used to simultaneously map and unmap buffers. The issue arises from improper handling of buffer management, allowing for potential exploitation through crafted IOCTL commands.
Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm August 2025 Security Bulletin.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 7, 2025Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html | [email protected] | PatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| qualcomm fastconnect 6900 firmware | All versions |
CPE
Remediation
| |
| qualcomm fastconnect 6900 | All versions |
CPE
Remediation
| |
| qualcomm qam8255p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8255p | All versions |
CPE
Remediation
| |
| qualcomm qam8650p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8650p | All versions |
CPE
Remediation
| |
| qualcomm qam8775p firmware | All versions |
CPE
Remediation
| |
| qualcomm qam8775p | All versions |
CPE
Remediation
| |
| qualcomm qca6174a firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6174a | All versions |
CPE
Remediation
| |
| qualcomm qca6698aq firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6698aq | All versions |
CPE
Remediation
| |
| qualcomm qca6797aq firmware | All versions |
CPE
Remediation
| |
| qualcomm qca6797aq | All versions |
CPE
Remediation
| |
| qualcomm sa7255p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa7255p | All versions |
CPE
Remediation
| |
| qualcomm sa7775p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa7775p | All versions |
CPE
Remediation
| |
| qualcomm sa8255p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8255p | All versions |
CPE
Remediation
| |
| qualcomm sa8620p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8620p | All versions |
CPE
Remediation
| |
| qualcomm sa8650p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8650p | All versions |
CPE
Remediation
| |
| qualcomm sa8775p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa8775p | All versions |
CPE
Remediation
| |
| qualcomm sa9000p firmware | All versions |
CPE
Remediation
| |
| qualcomm sa9000p | All versions |
CPE
Remediation
| |
| qualcomm snapdragon 888 5g mobile platform firmware | All versions |
CPE
Remediation
| |
| qualcomm snapdragon 888 5g mobile platform | All versions |
CPE
Remediation
| |
| qualcomm snapdragon 888+ 5g mobile platform (sm8350-ac) firmware | All versions |
CPE
Remediation
| |
| qualcomm snapdragon 888+ 5g mobile platform (sm8350-ac) | All versions |
CPE
Remediation
| |
| qualcomm sw5100 firmware | All versions |
CPE
Remediation
| |
| qualcomm sw5100 | All versions |
CPE
Remediation
| |
| qualcomm sw5100p firmware | All versions |
CPE
Remediation
| |
| qualcomm sw5100p | All versions |
CPE
Remediation
| |
| qualcomm wcd9380 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcd9380 | All versions |
CPE
Remediation
| |
| qualcomm wcd9385 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcd9385 | All versions |
CPE
Remediation
| |
| qualcomm wcn3980 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn3980 | All versions |
CPE
Remediation
| |
| qualcomm wcn3988 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn3988 | All versions |
CPE
Remediation
| |
| qualcomm wsa8830 firmware | All versions |
CPE
Remediation
| |
| qualcomm wsa8830 | All versions |
CPE
Remediation
| |
| qualcomm wsa8835 firmware | All versions |
CPE
Remediation
| |
| qualcomm wsa8835 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Aug 19, 2025 | Initial Analysis | [email protected] |
| Aug 6, 2025 | New CVE Received | [email protected] |