First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-21463

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS while processing the EHT operation IE in the received beacon frame.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	AR8035; CSR8811; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; Immersive Home 318 Platform; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5010; IPQ5028; IPQ5300; IPQ5302; IPQ5312; IPQ5332; IPQ5424; IPQ6000

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.htmlVendor Advisory

Timeline

Published: Jun 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-214646.5Information disclosure while reading data from an image using specified offset and size parameters.CVE-2025-214656.5Information disclosure while processing the hash segment in an MBN file.CVE-2025-214667.8Memory corruption while processing a private escape command in an event trigger.CVE-2025-214677.8Memory corruption while reading the FW response from the shared queue.CVE-2025-214687.8Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character CVE-2025-214697.8Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call.CVE-2025-21477.5A vulnerability was found in Beijing Zhide Intelligent Internet Technology Modern Farm Digital Integrated Management System 1.0. It has been CVE-2025-214707.8Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.CVE-2025-214725.5Information disclosure while capturing logs as eSE debug messages are logged.CVE-2025-214737.0Memory corruption when using Virtual cdm (Camera Data Mover) to write registers.CVE-2025-214747.8Memory corruption while processing commands from A2dp sink command queue.CVE-2025-214757.8Memory corruption while processing escape code, when DisplayId is passed with large unsigned value.

CVE-2025-21463: High severity, CVSS 7.5 | Vulnix