CVE-2025-21424

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while calling the NPU driver APIs concurrently.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon315 5G IoT Modem; AQT1000; AR8031; AR8035; C-V2X 9150; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; MDM9628; QAM8255P; QAM8295P; QAM8620P; QAM8650P; QAM8775P; QAMSRV1H

References

Timeline

Published
Mar 3, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-214257.8Memory corruption may occur due top improper access control in HAB process.CVE-2025-214267.8Memory corruption while processing camera TPG write request.CVE-2025-214278.2Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.CVE-2025-214287.5Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.CVE-2025-214297.5Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.CVE-2025-214307.5Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.CVE-2025-214314.7Information disclosure may be there when a guest VM is connected.CVE-2025-214327.8Memory corruption while retrieving the CBOR data from TA.CVE-2025-214335.5Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.CVE-2025-214347.5Transient DOS may occur while parsing EHT operation IE or EHT capability IE.CVE-2025-214357.5Transient DOS may occur while parsing extended IE in beacon.CVE-2025-214367.8Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.
CVE-2025-21424: High severity, CVSS 7.8 | Vulnix