by Kastro
Paper/Archive/CVE-2025-21483

CVE-2025-21483

Qualcomm, Inc. Snapdragon — Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 36.1.361 × 207.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Affected

ProductAffectedFixed inSource
SnapdragonAPQ8017–CNA
SnapdragonAPQ8064AU–CNA
SnapdragonAQT1000–CNA
SnapdragonFastConnect 6200–CNA
SnapdragonFastConnect 6700–CNA
SnapdragonFastConnect 6800–CNA
SnapdragonFastConnect 6900–CNA
SnapdragonFastConnect 7800–CNA
SnapdragonMSM8996AU–CNA
SnapdragonQAM8255P–CNA
SnapdragonQAM8295P–CNA
SnapdragonQAM8620P–CNA

Scores by source

qualcomm (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refdocs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html