01 Record
CVE-2025-21428
Buffer Over-read in WLAN Host
HighPUBLISHEDCNA: qualcomm
CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
02 Description
Buffer Over-read in WLAN Host
03 Exploitation and scoring
- Exploitation
- Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
- SSVC decision
- ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
- AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
- Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.
- EPSS probability
- 0.25% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 17.2% of scored records. A rank, not a probability.
- NVD base score
- 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVD analysis status
- Analyzed. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2025-04-07 10:15Z1 YR AGO
- Last updated
- 2026-02-26 18:28Z8 MO AGO
- Reserved
- 2024-12-18
- Assigning CNA
- qualcomm
- Record state
- PUBLISHED
- Severity
- High (CVSS 7.5)
- CNA CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-126Buffer Over-readVariant
- Data version
- 5.2
- Document digest
- c3313d968d96f88c78bb104eed7b73f2563cc98b17d2c93401761b978ff1b4c5
05 Affected products
VendorProductVersionsPlatforms
Qualcomm, Inc.Snapdragon9206 LTE Modem, APQ8017, AR8031, C-V2X 9150, CSRA6620, CSRA6640, FastConnect 6200, FastConnect 6900, MDM9250, MDM9628, MDM9640, MDM9650, MSM8996AU, QCA6174, QCA6174A, QCA6175A, QCA6554A, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584, QCA6584AU, QCA6595, QCA6595AU, QCA6696, QCA9367, QCA9377, QCA9379, QCM2150, QEP8111, Qualcomm 205 Mobile Platform, Qualcomm 215 Mobile Platform, SA2150P, SD626, SDM429W, Smart Audio 200 Platform, Smart Audio 400 Platform, Smart Display 200 Platform (APQ5053-AA), Snapdragon 1200 Wearable Platform, Snapdragon 210 Processor, Snapdragon 212 Mobile Platform, Snapdragon 425 Mobile Platform, Snapdragon 429 Mobile Platform, Snapdragon 439 Mobile Platform, Snapdragon 625 Mobile Platform, Snapdragon 626 Mobile Platform, Snapdragon 632 Mobile Platform, Snapdragon 820 Automotive Platform, Snapdragon Auto 5G Modem-RF, Snapdragon X12 LTE Modem, Snapdragon X35 5G Modem-RF System, Snapdragon X5 LTE Modem, Vision Intelligence 100 Platform (APQ8053-AA), Vision Intelligence 200 Platform (APQ8053-AC), WCD9326, WCD9330, WCD9335, WCD9340, WCN3610, WCN3615, WCN3620, WCN3660B, WCN3680, WCN3680B, WCN3980, WSA8810, WSA8815Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables