{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-21476", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2024-12-18T09:50:08.928Z", "datePublished": "2025-09-24T15:33:26.225Z", "dateUpdated": "2025-09-25T03:55:45.888Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "QCM5430"}, {"status": "affected", "version": "QCM6490"}, {"status": "affected", "version": "QCM8550"}, {"status": "affected", "version": "QCS5430"}, {"status": "affected", "version": "QCS615"}, {"status": "affected", "version": "QCS6490"}, {"status": "affected", "version": "QCS8550"}, {"status": "affected", "version": "QCS9100"}, {"status": "affected", "version": "SG8275"}, {"status": "affected", "version": "SG8275P"}, {"status": "affected", "version": "SM6650"}, {"status": "affected", "version": "SM7635"}, {"status": "affected", "version": "SM7675"}, {"status": "affected", "version": "SM7675P"}, {"status": "affected", "version": "SM8550"}, {"status": "affected", "version": "SM8550P"}, {"status": "affected", "version": "SM8635"}, {"status": "affected", "version": "SM8635P"}, {"status": "affected", "version": "SM8650"}, {"status": "affected", "version": "SM8650P"}, {"status": "affected", "version": "SM8650Q"}, {"status": "affected", "version": "SM8750"}, {"status": "affected", "version": "SM8750P"}, {"status": "affected", "version": "SXR2330P"}, {"status": "affected", "version": "QCA6391"}, {"status": "affected", "version": "QCA6698AQ"}, {"status": "affected", "version": "QCN9011"}, {"status": "affected", "version": "QCN9012"}, {"status": "affected", "version": "QCN9274"}, {"status": "affected", "version": "WCN3910"}, {"status": "affected", "version": "WCN3950"}, {"status": "affected", "version": "WCN6650"}, {"status": "affected", "version": "WCN6750"}, {"status": "affected", "version": "WCN6755"}, {"status": "affected", "version": "WCN6855"}, {"status": "affected", "version": "WCN6856"}, {"status": "affected", "version": "WCN7850"}, {"status": "affected", "version": "WCN7851"}, {"status": "affected", "version": "WCN7860"}, {"status": "affected", "version": "WCN7861"}, {"status": "affected", "version": "WCN7880"}, {"status": "affected", "version": "WCN7881"}]}], "descriptions": [{"lang": "en", "value": "Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-120", "description": "CWE-120 Buffer Copy Without Checking Size of Input ('Classic Buffer Overflow')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2025-09-24T15:33:26.225Z"}, "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html"}], "title": "Buffer Copy Without Checking Size of Input in Computer Vision"}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-03T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2025-21476"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-25T03:55:45.888Z"}}]}}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "403AE561-6C9E-49F3-A5D6-C48DDD51D663", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcs6490:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FAC140F-FC5E-4C88-B777-7F5EBF49A695", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FFF23DDB-98A0-4343-ADD3-5AB9C2383E7E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcs8550:-:*:*:*:*:*:*:*", "matchCriteriaId": "5ACB8AFB-5B91-4AA1-BA3A-1AF0B3503080", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcs9100_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "057E49CC-28C0-4A82-A895-6E681AB1E22F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcs9100:-:*:*:*:*:*:*:*", "matchCriteriaId": "6A7FE265-B8C2-4423-9F13-A64111248D65", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sg8275_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2E4ECE56-FD6C-4A0F-A024-8AF7A7450096", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sg8275:-:*:*:*:*:*:*:*", "matchCriteriaId": "2E26A0E2-ABC4-4B97-9DFB-FB27F95E0F07", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sg8275p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8509F3A3-A1CA-466B-9031-4146C36B9AF8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sg8275p:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1813AB7-44F5-476B-9533-536F5B2F26BB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm6650_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3BB505DE-5B4A-4CFA-BA99-1307DBF96A43", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm6650:-:*:*:*:*:*:*:*", "matchCriteriaId": "39296E3C-4E0F-4B90-A3C0-CA9C9F74CBB6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm7635_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "094197AC-0D25-480F-B797-06AC9842CD5C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm7635:-:*:*:*:*:*:*:*", "matchCriteriaId": "40AC736A-FEB8-49B3-8500-DB3339906C77", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm7675_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "012C20A8-3F48-48DD-9A77-65C9CB1F6C30", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm7675:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE992A86-36BC-40E3-8E96-6542560BE8EC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm7675p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B46F132-4049-40D0-8351-C1C6FD2B47A0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm7675p:-:*:*:*:*:*:*:*", "matchCriteriaId": "1846514C-1F95-4568-98DE-C57214401841", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm8550_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F6DE83F-F601-4560-96B0-85BC4C153A0A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm8550:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C39AB5E-6BEC-4A5B-ADE1-1AFCECEF9297", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4CDD6A2-5A3C-4572-8CE1-2F102333BB79", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm8550p:-:*:*:*:*:*:*:*", "matchCriteriaId": "699E5D17-6144-4F0A-8D52-1E8C83990E52", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm8635_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "65865EE9-59C0-498F-A4C5-EC00D4642603", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm8635:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE02AB51-6FB6-4727-999B-A7466CEDC534", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm8635p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "88F63D90-4BFC-4EFA-8B74-7A5027A7052D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm8635p:-:*:*:*:*:*:*:*", "matchCriteriaId": "20EB529B-6B9F-464F-A98B-A8ABE0F01ADB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm8650_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5FA5FB61-BB13-4557-87AC-3EE6C4A8BD47", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm8650:-:*:*:*:*:*:*:*", "matchCriteriaId": "593D81E0-8B38-4874-9EAA-DCA288A15ED6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm8650p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "766D70DA-1CC7-4FAC-BDBC-A0960FFD65DA", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm8650p:-:*:*:*:*:*:*:*", "matchCriteriaId": "36A2B662-00C4-46EC-B155-D8ABF8E4C6E4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm8650q_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1CAA8D9D-0238-4223-8F7B-134ECBB6FA05", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm8650q:-:*:*:*:*:*:*:*", "matchCriteriaId": "D8A722B8-E1E4-43B4-8882-591CE8C5C166", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm8750_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "84641A8E-A93C-48C1-86AC-193951BA4D78", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm8750:-:*:*:*:*:*:*:*", "matchCriteriaId": "74169A4C-0247-4719-887E-BBFB36B04F07", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sm8750p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D8ABDBF-BABC-4219-8A18-BDFC8C826B1F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sm8750p:-:*:*:*:*:*:*:*", "matchCriteriaId": "685D81D0-7E95-4DBA-A05B-7C708A5DFDF0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sxr2330p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "568C5B08-AC42-48D3-8029-A65689EEBE75", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sxr2330p:-:*:*:*:*:*:*:*", "matchCriteriaId": "56DD2B49-0A36-443C-BECB-4115E271A415", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "83B53119-1B2F-4978-B7F5-33B84BE73B68", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FEBC0C5-CAA1-475C-96C2-B8D24B2E4536", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5FA1F8F4-EAF2-4704-A8A6-19AD3CA1B577", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*", "matchCriteriaId": "B3F7853D-09EE-476F-B48D-BB30AEB4A67D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9011_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9306C34D-47E4-40CF-89F4-BA5263655D13", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9011:-:*:*:*:*:*:*:*", "matchCriteriaId": "02BA009F-24E1-4953-BA95-2A5BC1CDBDBB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "61F34DD2-9DC0-49E5-BC85-1543EA199477", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9012:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A06879F-6FE9-448A-8186-8347D76F872B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcn9274_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9129A244-AB8C-4AA4-BFBB-37F84D66BD3E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcn9274:-:*:*:*:*:*:*:*", "matchCriteriaId": "41F243A1-3C0B-4780-95BF-69A4E1A91F18", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn3910_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9F0D7B24-D567-479A-B4F1-595FAA053418", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn3910:-:*:*:*:*:*:*:*", "matchCriteriaId": "33A8FAA1-F824-4561-9CCC-7F0DF12F740F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3FEF2DB6-00F5-4B07-953B-EF58B31267F1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*", "matchCriteriaId": "120E8F0F-EBEB-4565-9927-2D473F783EF7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn6650_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "93398092-AF7C-4F04-874C-7E5B4CF7AB00", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn6650:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D242084-5844-4E43-8D7F-D2F8E3521F0C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn6750_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F8EE21BA-7178-4D69-852D-2322844FC6B9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn6750:-:*:*:*:*:*:*:*", "matchCriteriaId": "E9BACB28-F6EA-445A-B74F-0C3881FE59CB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2BC386D9-3D2B-40FA-A2D9-199BB138F46A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn6755:-:*:*:*:*:*:*:*", "matchCriteriaId": "133FFD9F-FA09-4801-939B-AD1D507BE5FE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn6855_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "180EB150-C114-429D-941F-9B99CDA4F810", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn6855:-:*:*:*:*:*:*:*", "matchCriteriaId": "93BA62AF-3555-463A-8B51-76F07BF0B87E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn6856_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "54C616C5-6480-4FE0-9A1C-08026CCB08D8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D8E02BA-3A7E-4B13-A8D7-20FD0FAE3187", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn7850_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "16EB11D8-27A3-4D04-B863-7FD4549D0BCD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn7850:-:*:*:*:*:*:*:*", "matchCriteriaId": "CF9B5B84-3C57-4D3D-AFF0-958A19DE09E8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn7851_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FFC44DC-DA90-45F5-ACC1-5262D3E3A796", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn7851:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE9D9A56-2157-43F0-BB18-2B7249D7E021", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2EB8794F-7998-424E-AF68-E4A4F9310F65", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*", "matchCriteriaId": "799D69CE-3FCC-4B19-8B00-9AF38111D983", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "57608D47-894C-4895-B4B3-4733D55D57DB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FFD2C38-1A61-4BED-ABFA-DAE0C4B78620", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "63735D33-9F09-4841-9FE0-0D9AB604BECF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:*", "matchCriteriaId": "E826F765-4C2E-4319-BBC4-DEB02AAD783F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "D765C392-5F38-4E6A-9E88-59629E7A6911", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:*", "matchCriteriaId": "FAE8F4F9-F692-4EC0-A3FE-2CDD681DCBFD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcm5430_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4EC5F81B-AA24-4E3C-9FC8-53E010AC977E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcm5430:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5C66DAD-0D85-46B8-92D7-6D68B9429E9A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "ADD6D51E-5787-42A6-8A02-4EBBAFFF9C94", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*", "matchCriteriaId": "99AA0291-B822-4CAD-BA17-81B632FC3FEF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "646B241B-2971-4929-9FB6-7A4CBF801CBB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcm8550:-:*:*:*:*:*:*:*", "matchCriteriaId": "5654FFB5-9A89-4399-AFAB-0A26726DEC81", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcs5430_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B6926498-667C-4866-B3DD-A7E20B8F4D7F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcs5430:-:*:*:*:*:*:*:*", "matchCriteriaId": "CEFEBC7A-80C0-4E4F-B9C7-53EECF86B6B5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcs615_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A369459-FC20-4F7C-A8D9-89E132900F37", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcs615:-:*:*:*:*:*:*:*", "matchCriteriaId": "B8444225-A03E-44D7-8BB8-6102EF3A2356", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake."}], "id": "CVE-2025-21476", "lastModified": "2025-09-25T16:08:48.700", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "product-security@qualcomm.com", "type": "Primary"}]}, "published": "2025-09-24T16:15:33.347", "references": [{"source": "product-security@qualcomm.com", "tags": ["Vendor Advisory"], "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html"}], "sourceIdentifier": "product-security@qualcomm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "product-security@qualcomm.com", "type": "Primary"}]}

{}