CVE-2025-21477

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Transient DOS while processing CCCH data when NW sends data with invalid length.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Aug 6, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-214798.6Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.CVE-2025-21487.5A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.opsCVE-2025-214808.6Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.CVE-2025-214817.8Memory corruption while performing private key encryption in trusted application.CVE-2025-214827.1Cryptographic issue while performing RSA PKCS padding decoding.CVE-2025-214839.8Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.CVE-2025-214848.2Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.CVE-2025-214857.8Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.CVE-2025-214867.8Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.CVE-2025-214878.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the availablCVE-2025-214888.2Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.CVE-2025-214896.1Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions
CVE-2025-21477: High severity, CVSS 7.5 | Vulnix