CVE-2025-21439

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Apr 7, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-214407.8Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.CVE-2025-214417.8Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.CVE-2025-214427.8Memory corruption while transmitting packet mapping information with invalid header payload size.CVE-2025-214437.8Memory corruption while processing message content in eAVB.CVE-2025-214447.8Memory corruption while copying the result to the transmission queue in EMAC.CVE-2025-214457.8Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host.CVE-2025-214467.5Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.CVE-2025-214477.8Memory corruption may occur while processing device IO control call for session control.CVE-2025-214487.5Transient DOS may occur while parsing SSID in action frames.CVE-2025-214497.5Transient DOS may occur while processing malformed length field in SSID IEs.CVE-2025-214509.1Cryptographic issue occurs due to use of insecure connection method while downloading.CVE-2025-214527.5Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.
CVE-2025-21439: High severity, CVSS 7.8 | Vulnix