ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2025-21486

—
CVSS 3.1
7.8 high
EPSS
<1%p1
Published
()
Modified
Description

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

Vendors
qualcomm
Products
fastconnect 6900 firmware, fastconnect 7800 firmware, qmp1000 firmware, sm8735 firmware, sm8750 firmware, sm8750p firmware, snapdragon w5\+ gen 1 wearable platform firmware, sw5100 firmware, sw5100p firmware, sxr2230p firmware, sxr2250p firmware, sxr2330p firmware
Weakness
CWE-822
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news

No ingested article mentions this CVE yet.