First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-21485

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon	FastConnect 6900; FastConnect 7800; QMP1000; SM8735; SM8750; SM8750P; Snapdragon 8 Gen 3 Mobile Platform; Snapdragon W5+ Gen 1 Wearable Platform; SW5100; SW5100P; SXR2230P; SXR2250P; SXR2330P; WCD9378; WCD9380; WCD9385; WCD9390; WCD9395; WCN7750; WCN7860

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.htmlVendor Advisory

Timeline

Published: Jun 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-214867.8Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.CVE-2025-214878.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the availabl CVE-2025-214888.2Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.CVE-2025-214896.1Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions CVE-2025-21492.5A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of th CVE-2025-214904.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8 CVE-2025-214914.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8 CVE-2025-214924.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 a CVE-2025-214934.4Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected a CVE-2025-214944.1Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected a CVE-2025-214954.4Vulnerability in the MySQL Enterprise Firewall product of Oracle MySQL (component: Firewall). Supported versions that are affected are 8.0.CVE-2025-214975.5Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8

CVE-2025-21485: High severity, CVSS 7.8 | Vulnix