First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-21427

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Weakness enumeration

CWE-126 CWE-125

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	APQ8064AU; AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; MSM8996AU; QAM8255P; QAM8295P; QAM8650P; QAM8775P; QCA6310; QCA6320; QCA6335; QCA6391; QCA6420; QCA6426; QCA6430; QCA6436

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.htmlVendor Advisory

Timeline

Published: Jul 8, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-214287.5Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.CVE-2025-214297.5Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.CVE-2025-214307.5Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.CVE-2025-214314.7Information disclosure may be there when a guest VM is connected.CVE-2025-214327.8Memory corruption while retrieving the CBOR data from TA.CVE-2025-214335.5Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.CVE-2025-214347.5Transient DOS may occur while parsing EHT operation IE or EHT capability IE.CVE-2025-214357.5Transient DOS may occur while parsing extended IE in beacon.CVE-2025-214367.8Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.CVE-2025-214377.8Memory corruption while processing memory map or unmap IOCTL operations simultaneously.CVE-2025-214387.8Memory corruption while IOCTL call is invoked from user-space to read board data.CVE-2025-214397.8Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.

CVE-2025-21427: High severity, CVSS 8.2 | Vulnix