CVE-2025-21446

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-126CWE-125

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAR8035; AR9380; CSR8811; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; IPQ5010; IPQ5028; IPQ5332; IPQ6000; IPQ6010; IPQ6018; IPQ6028; IPQ8064; IPQ8065

References

Timeline

Published
Jul 8, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-214477.8Memory corruption may occur while processing device IO control call for session control.CVE-2025-214487.5Transient DOS may occur while parsing SSID in action frames.CVE-2025-214497.5Transient DOS may occur while processing malformed length field in SSID IEs.CVE-2025-214509.1Cryptographic issue occurs due to use of insecure connection method while downloading.CVE-2025-214527.5Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.CVE-2025-214537.8Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.CVE-2025-214547.5Transient DOS while processing received beacon frame.CVE-2025-214557.8Memory corruption while submitting blob data to kernel space though IOCTL.CVE-2025-214567.8Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.CVE-2025-214576.1Information disclosure while opening a fastrpc session when domain is not sanitized.CVE-2025-214587.8Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.CVE-2025-214597.5Transient DOS while parsing per STA profile in ML IE.
CVE-2025-21446: High severity, CVSS 7.5 | Vulnix