CVE-2025-21428

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_439_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_439_mobile_platform:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_625_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_625_mobile_platform:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_626_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_626_mobile_platform:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_632_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_632_mobile_platform:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_820_automotive_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_820_automotive_platform:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_x12_lte_modem_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x12_lte_modem:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_x35_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x35_5g_modem-rf_system:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_x5_lte_modem_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x5_lte_modem:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:vision_intelligence_100_platform_\(apq8053-aa\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:vision_intelligence_100_platform_\(apq8053-aa\):-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:vision_intelligence_200_platform_\(apq8053-ac\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:vision_intelligence_200_platform_\(apq8053-ac\):-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9326:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:wcd9330_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9330:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3610:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3615:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:qualcomm:wcn3680_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3680:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:qualcomm:9206_lte_modem_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:9206_lte_modem:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:qualcomm:c-v2x_9150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:c-v2x_9150:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6200:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:qualcomm:mdm9250_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9250:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:qualcomm:mdm9628_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9628:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:qualcomm:qca6174_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6174:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:qualcomm:qca6175a_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6175a:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND
cpe:2.3:o:qualcomm:qca6554a_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6554a:-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND
cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND
cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*

Configuration 44 (hide)

AND
cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND
cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

Configuration 47 (hide)

AND
cpe:2.3:o:qualcomm:qca6584_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6584:-:*:*:*:*:*:*:*

Configuration 48 (hide)

AND
cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*

Configuration 49 (hide)

AND
cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*

Configuration 50 (hide)

AND
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*

Configuration 51 (hide)

AND
cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*

Configuration 52 (hide)

AND
cpe:2.3:o:qualcomm:qca9367_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9367:-:*:*:*:*:*:*:*

Configuration 53 (hide)

AND
cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*

Configuration 54 (hide)

AND
cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9379:-:*:*:*:*:*:*:*

Configuration 55 (hide)

AND
cpe:2.3:o:qualcomm:qcm2150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcm2150:-:*:*:*:*:*:*:*

Configuration 56 (hide)

AND
cpe:2.3:o:qualcomm:qep8111_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qep8111:-:*:*:*:*:*:*:*

Configuration 57 (hide)

AND
cpe:2.3:o:qualcomm:qualcomm_205_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qualcomm_205_mobile_platform:-:*:*:*:*:*:*:*

Configuration 58 (hide)

AND
cpe:2.3:o:qualcomm:qualcomm_215_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qualcomm_215_mobile_platform:-:*:*:*:*:*:*:*

Configuration 59 (hide)

AND
cpe:2.3:o:qualcomm:sa2150p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa2150p:-:*:*:*:*:*:*:*

Configuration 60 (hide)

AND
cpe:2.3:o:qualcomm:sd626_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd626:-:*:*:*:*:*:*:*

Configuration 61 (hide)

AND
cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*

Configuration 62 (hide)

AND
cpe:2.3:o:qualcomm:smart_audio_200_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smart_audio_200_platform:-:*:*:*:*:*:*:*

Configuration 63 (hide)

AND
cpe:2.3:o:qualcomm:smart_audio_400_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smart_audio_400_platform:-:*:*:*:*:*:*:*

Configuration 64 (hide)

AND
cpe:2.3:o:qualcomm:smart_display_200_platform_\(apq5053-aa\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smart_display_200_platform_\(apq5053-aa\):-:*:*:*:*:*:*:*

Configuration 65 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_1200_wearable_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_1200_wearable_platform:-:*:*:*:*:*:*:*

Configuration 66 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_210_processor_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_210_processor:-:*:*:*:*:*:*:*

Configuration 67 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_212_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_212_mobile_platform:-:*:*:*:*:*:*:*

Configuration 68 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_425_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_425_mobile_platform:-:*:*:*:*:*:*:*

Configuration 69 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_429_mobile_platform:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2025-04-07 11:15

Updated : 2025-10-06 19:51


NVD link : CVE-2025-21428

Mitre link : CVE-2025-21428

CVE.ORG link : CVE-2025-21428


JSON object : View

Products Affected

qualcomm

  • qca6564au
  • mdm9628_firmware
  • fastconnect_6900_firmware
  • smart_audio_200_platform
  • snapdragon_632_mobile_platform
  • wcd9335
  • c-v2x_9150
  • sd626_firmware
  • mdm9650
  • vision_intelligence_100_platform_\(apq8053-aa\)
  • qca9367_firmware
  • qca6595_firmware
  • csra6640
  • qca9379_firmware
  • snapdragon_x35_5g_modem-rf_system
  • qca6564a
  • qep8111_firmware
  • snapdragon_820_automotive_platform
  • smart_display_200_platform_\(apq5053-aa\)
  • msm8996au
  • snapdragon_439_mobile_platform
  • qca6595
  • wsa8810
  • wcn3660b
  • wcd9335_firmware
  • 9206_lte_modem_firmware
  • qca6174
  • 9206_lte_modem
  • qca6174a_firmware
  • snapdragon_625_mobile_platform
  • wcn3680b
  • wcn3610
  • fastconnect_6200_firmware
  • csra6640_firmware
  • wcd9326
  • qcm2150
  • wcn3680_firmware
  • wcd9326_firmware
  • qca6554a
  • apq8017
  • wcd9330
  • qca6564a_firmware
  • qca6564au_firmware
  • snapdragon_auto_5g_modem-rf_firmware
  • snapdragon_429_mobile_platform_firmware
  • sdm429w_firmware
  • wcn3680
  • sa2150p_firmware
  • snapdragon_212_mobile_platform
  • qualcomm_215_mobile_platform
  • wsa8815
  • qca6574
  • qca9367
  • wcn3615
  • qca9379
  • snapdragon_x12_lte_modem
  • smart_audio_200_platform_firmware
  • snapdragon_210_processor_firmware
  • qca6175a_firmware
  • snapdragon_425_mobile_platform_firmware
  • wcn3610_firmware
  • csra6620
  • snapdragon_x35_5g_modem-rf_system_firmware
  • qca6574a
  • qep8111
  • wcn3620
  • qca6175a
  • qualcomm_205_mobile_platform_firmware
  • vision_intelligence_200_platform_\(apq8053-ac\)_firmware
  • mdm9650_firmware
  • qca6174a
  • snapdragon_auto_5g_modem-rf
  • wcn3620_firmware
  • apq8017_firmware
  • qca6584au
  • wcd9340
  • snapdragon_626_mobile_platform_firmware
  • snapdragon_1200_wearable_platform_firmware
  • snapdragon_x5_lte_modem
  • qualcomm_205_mobile_platform
  • c-v2x_9150_firmware
  • sdm429w
  • qca6574au
  • qca6696
  • qca6584au_firmware
  • snapdragon_425_mobile_platform
  • vision_intelligence_100_platform_\(apq8053-aa\)_firmware
  • sd626
  • fastconnect_6900
  • snapdragon_632_mobile_platform_firmware
  • sa2150p
  • qca6584
  • mdm9640
  • qca6574_firmware
  • qca6554a_firmware
  • wsa8815_firmware
  • qca6696_firmware
  • wcn3980_firmware
  • snapdragon_625_mobile_platform_firmware
  • smart_display_200_platform_\(apq5053-aa\)_firmware
  • snapdragon_439_mobile_platform_firmware
  • snapdragon_429_mobile_platform
  • snapdragon_820_automotive_platform_firmware
  • mdm9250_firmware
  • snapdragon_x5_lte_modem_firmware
  • wcd9340_firmware
  • ar8031
  • snapdragon_x12_lte_modem_firmware
  • mdm9640_firmware
  • smart_audio_400_platform_firmware
  • qca6595au_firmware
  • qca6584_firmware
  • wcn3615_firmware
  • mdm9250
  • snapdragon_210_processor
  • wsa8810_firmware
  • snapdragon_1200_wearable_platform
  • qca6595au
  • qca9377_firmware
  • smart_audio_400_platform
  • mdm9628
  • qca6574au_firmware
  • qca9377
  • vision_intelligence_200_platform_\(apq8053-ac\)
  • snapdragon_212_mobile_platform_firmware
  • wcn3660b_firmware
  • wcn3980
  • snapdragon_626_mobile_platform
  • fastconnect_6200
  • qualcomm_215_mobile_platform_firmware
  • qca6574a_firmware
  • msm8996au_firmware
  • csra6620_firmware
  • wcd9330_firmware
  • qcm2150_firmware
  • qca6174_firmware
  • wcn3680b_firmware
  • ar8031_firmware
CWE
CWE-126

Buffer Over-read