CVE-2025-21429: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request | LiveThreat CVE Feed — Verisq

Login Request a demo

High severity · published Apr 7, 2025

CVE-2025-21429

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request

7.5

CVSS

0.3%

EPSS

No

On KEV

Description

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 18% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

9L

9206 Lte Modem Firmware · Qualcomm

All versions, or not specified · source: NVD

AF

Apq8017 Firmware · Qualcomm

All versions, or not specified · source: NVD

AF

Apq8064au Firmware · Qualcomm

All versions, or not specified · source: NVD

AF

Aqt1000 Firmware · Qualcomm

All versions, or not specified · source: NVD

AF

Ar8035 Firmware · Qualcomm

All versions, or not specified · source: NVD

C9

C-v2x 9150 Firmware · Qualcomm

All versions, or not specified · source: NVD

CF

Csra6620 Firmware · Qualcomm

All versions, or not specified · source: NVD

CF

Csra6640 Firmware · Qualcomm

All versions, or not specified · source: NVD

CF

Csrb31024 Firmware · Qualcomm

All versions, or not specified · source: NVD

F6

Fastconnect 6200 Firmware · Qualcomm

All versions, or not specified · source: NVD

F6

Fastconnect 6700 Firmware · Qualcomm

All versions, or not specified · source: NVD

F6

Fastconnect 6800 Firmware · Qualcomm

All versions, or not specified · source: NVD

Affected product

9L

9206 Lte Modem Firmware

Qualcomm

All 9206 Lte Modem Firmware CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2025-21429

https://www.cve.org/CVERecord?id=CVE-2025-21429

Vendor Advisory

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html

More from 9206 Lte Modem Firmware

9.8

Memory Corruption in Multi-mode Call Processor while processing bit mask API

9.8

Memory Corruption in Data Modem while making a MO call or MT VOLTE call

8.2

Buffer Over-read in Multi Mode Call Processor

7.8

Memory corruption while processing MFC channel configuration during music playback

7.8

Memory corruption during PlayReady APP usecase while processing TA commands