High severity · published Apr 7, 2025
CVE-2025-21439
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
F6
Fastconnect 6700 Firmware · Qualcomm
All versions, or not specified · source: NVD
F6
Fastconnect 6900 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6595au Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcm5430 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcm6490 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcn7605 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcn7606 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcs5430 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcs6490 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sc8180x+sdx55 Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
Snapdragon 8c Compute Platform (sc8180x-ad) Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
Snapdragon 8c Compute Platform (sc8180xp-ad) Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-21439
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-21439
Vendor Advisory
https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
More from Fastconnect 6700 Firmware
8.6
CVE-2025-21479
Incorrect Authorization in Graphics
8.6
CVE-2025-21480
Incorrect Authorization in Graphics Windows
7.8
CVE-2026-21385
Integer Overflow or Wraparound in Graphics
7.8
CVE-2024-43047
Use After Free in DSP Service
7.8
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux