ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2025-21487

—
CVSS 3.1
8.2 high
EPSS
<1%p18
Published
()
Modified
Description

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Vendors
qualcomm
Products
apq8017 firmware, apq8064au firmware, aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware, snapdragon 460 mobile platform firmware, snapdragon 480 5g mobile platform firmware, snapdragon 480\+ 5g mobile platform \(sm4350-ac\) firmware, snapdragon 625 mobile platform firmware, snapdragon 626 mobile platform firmware, snapdragon 630 mobile platform firmware, snapdragon 632 mobile platform firmware
Weakness
CWE-126
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.