CVE-2025-21483

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	APQ8017; APQ8064AU; AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; MSM8996AU; QAM8255P; QAM8295P; QAM8620P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; QCA6310; QCA6320; QCA6335; QCA6391

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.htmlVendor Advisory

Timeline

Published: Sep 24, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-214848.2Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.CVE-2025-214857.8Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.CVE-2025-214867.8Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.CVE-2025-214878.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the availabl CVE-2025-214888.2Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.CVE-2025-214896.1Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions CVE-2025-21492.5A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of th CVE-2025-214904.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8 CVE-2025-214914.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8 CVE-2025-214924.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 a CVE-2025-214934.4Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected a CVE-2025-214944.1Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected a