First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-21434

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS may occur while parsing EHT operation IE or EHT capability IE.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; FastConnect 6700; FastConnect 6900; FastConnect 7800; QAM8255P; QAM8295P; QAM8620P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6391; QCA6554A; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6584AU; QCA6595; QCA6595AU

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.htmlVendor Advisory

Timeline

Published: Apr 7, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-214357.5Transient DOS may occur while parsing extended IE in beacon.CVE-2025-214367.8Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.CVE-2025-214377.8Memory corruption while processing memory map or unmap IOCTL operations simultaneously.CVE-2025-214387.8Memory corruption while IOCTL call is invoked from user-space to read board data.CVE-2025-214397.8Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.CVE-2025-214407.8Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.CVE-2025-214417.8Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.CVE-2025-214427.8Memory corruption while transmitting packet mapping information with invalid header payload size.CVE-2025-214437.8Memory corruption while processing message content in eAVB.CVE-2025-214447.8Memory corruption while copying the result to the transmission queue in EMAC.CVE-2025-214457.8Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host.CVE-2025-214467.5Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.

CVE-2025-21434: High severity, CVSS 7.5 | Vulnix