Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2025-21486 Details
Description
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
A memory corruption vulnerability has been identified in various chipsets of Qualcomm Snapdragon processors. This issue arises during dynamic process creation calls in the DSP service, where the client only provides the address and length of a shell binary. The vulnerability allows for untrusted pointer dereferencing, which can lead to memory corruption.
Qualcomm has patched this vulnerability. Instructions for applying the patch can be found in the Qualcomm June 2025 Security Bulletin.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 4, 2025Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-822 | Untrusted Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| qualcomm fastconnect 6900 firmware | All versions |
CPE
Remediation
| |
| qualcomm fastconnect 6900 | All versions |
CPE
Remediation
| |
| qualcomm fastconnect 7800 firmware | All versions |
CPE
Remediation
| |
| qualcomm fastconnect 7800 | All versions |
CPE
Remediation
| |
| qualcomm qmp1000 firmware | All versions |
CPE
Remediation
| |
| qualcomm qmp1000 | All versions |
CPE
Remediation
| |
| qualcomm sm8735 firmware | All versions |
CPE
Remediation
| |
| qualcomm sm8735 | All versions |
CPE
Remediation
| |
| qualcomm sm8750 firmware | All versions |
CPE
Remediation
| |
| qualcomm sm8750 | All versions |
CPE
Remediation
| |
| qualcomm sm8750p firmware | All versions |
CPE
Remediation
| |
| qualcomm sm8750p | All versions |
CPE
Remediation
| |
| qualcomm snapdragon w5+ gen 1 wearable platform firmware | All versions |
CPE
Remediation
| |
| qualcomm snapdragon w5+ gen 1 wearable platform | All versions |
CPE
Remediation
| |
| qualcomm sw5100 firmware | All versions |
CPE
Remediation
| |
| qualcomm sw5100 | All versions |
CPE
Remediation
| |
| qualcomm sw5100p firmware | All versions |
CPE
Remediation
| |
| qualcomm sw5100p | All versions |
CPE
Remediation
| |
| qualcomm sxr2230p firmware | All versions |
CPE
Remediation
| |
| qualcomm sxr2230p | All versions |
CPE
Remediation
| |
| qualcomm sxr2250p firmware | All versions |
CPE
Remediation
| |
| qualcomm sxr2250p | All versions |
CPE
Remediation
| |
| qualcomm sxr2330p firmware | All versions |
CPE
Remediation
| |
| qualcomm sxr2330p | All versions |
CPE
Remediation
| |
| qualcomm wcd9378 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcd9378 | All versions |
CPE
Remediation
| |
| qualcomm wcd9380 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcd9380 | All versions |
CPE
Remediation
| |
| qualcomm wcd9385 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcd9385 | All versions |
CPE
Remediation
| |
| qualcomm wcd9395 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcd9395 | All versions |
CPE
Remediation
| |
| qualcomm wcn3660b firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn3660b | All versions |
CPE
Remediation
| |
| qualcomm wcn3680b firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn3680b | All versions |
CPE
Remediation
| |
| qualcomm wcn3980 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn3980 | All versions |
CPE
Remediation
| |
| qualcomm wcn3988 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn3988 | All versions |
CPE
Remediation
| |
| qualcomm wcn7750 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn7750 | All versions |
CPE
Remediation
| |
| qualcomm wcn7860 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn7860 | All versions |
CPE
Remediation
| |
| qualcomm wcn7861 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn7861 | All versions |
CPE
Remediation
| |
| qualcomm wcn7880 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn7880 | All versions |
CPE
Remediation
| |
| qualcomm wcn7881 firmware | All versions |
CPE
Remediation
| |
| qualcomm wcn7881 | All versions |
CPE
Remediation
| |
| qualcomm wsa8830 firmware | All versions |
CPE
Remediation
| |
| qualcomm wsa8830 | All versions |
CPE
Remediation
| |
| qualcomm wsa8832 firmware | All versions |
CPE
Remediation
| |
| qualcomm wsa8832 | All versions |
CPE
Remediation
| |
| qualcomm wsa8835 firmware | All versions |
CPE
Remediation
| |
| qualcomm wsa8835 | All versions |
CPE
Remediation
| |
| qualcomm wsa8840 firmware | All versions |
CPE
Remediation
| |
| qualcomm wsa8840 | All versions |
CPE
Remediation
| |
| qualcomm wsa8845 firmware | All versions |
CPE
Remediation
| |
| qualcomm wsa8845 | All versions |
CPE
Remediation
| |
| qualcomm wsa8845h firmware | All versions |
CPE
Remediation
| |
| qualcomm wsa8845h | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Aug 20, 2025 | Initial Analysis | [email protected] |
| Jun 3, 2025 | New CVE Received | [email protected] |