First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-21457

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Information disclosure while opening a fastrpc session when domain is not sanitized.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; FastConnect 7800; QCA6584AU; QCA6698AQ; QCA8081; QCA8337; QCC710; QCN6224; QCN6274; QFW7114; QFW7124; Snapdragon Auto 5G Modem-RF Gen 2; Snapdragon X72 5G Modem-RF System; Snapdragon X75 5G Modem-RF System; WCD9340

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.htmlPatch, Vendor Advisory

Timeline

Published: Aug 6, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-214587.8Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.CVE-2025-214597.5Transient DOS while parsing per STA profile in ML IE.CVE-2025-21469.8Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an atta CVE-2025-214607.8Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously.CVE-2025-214617.8Memory corruption when programming registers through virtual CDM.CVE-2025-214627.8Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.CVE-2025-214637.5Transient DOS while processing the EHT operation IE in the received beacon frame.CVE-2025-214646.5Information disclosure while reading data from an image using specified offset and size parameters.CVE-2025-214656.5Information disclosure while processing the hash segment in an MBN file.CVE-2025-214667.8Memory corruption while processing a private escape command in an event trigger.CVE-2025-214677.8Memory corruption while reading the FW response from the shared queue.CVE-2025-214687.8Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character

CVE-2025-21457: Medium severity, CVSS 6.1 | Vulnix