CVE-2025-21428 — Buffer Over-read in WLAN Host

Description (CNA)

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected 9206 LTE Modem; affected APQ8017; affected AR8031; affected C-V2X 9150; affected CSRA6620; affected CSRA6640; affected FastConnect 6200; affected FastConnect 6900; affected MDM9250; affected MDM9628; affected MDM9640; affected MDM9650; affected MSM8996AU; affected QCA6174; affected QCA6174A; affected QCA6175A; affected QCA6554A; affected QCA6564A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6696; affected QCA9367; affected QCA9377; affected QCA9379; affected QCM2150; affected QEP8111; affected Qualcomm 205 Mobile Platform; affected Qualcomm 215 Mobile Platform; affected SA2150P; affected SD626; affected SDM429W; affected Smart Audio 200 Platform; affected Smart Audio 400 Platform; affected Smart Display 200 Platform (APQ5053-AA); affected Snapdragon 1200 Wearable Platform; affected Snapdragon 210 Processor; affected Snapdragon 212 Mobile Platform; affected Snapdragon 425 Mobile Platform; affected Snapdragon 429 Mobile Platform; affected Snapdragon 439 Mobile Platform; affected Snapdragon 625 Mobile Platform; affected Snapdragon 626 Mobile Platform; affected Snapdragon 632 Mobile Platform; affected Snapdragon 820 Automotive Platform; affected Snapdragon Auto 5G Modem-RF; affected Snapdragon X12 LTE Modem; affected Snapdragon X35 5G Modem-RF System; affected Snapdragon X5 LTE Modem; affected Vision Intelligence 100 Platform (APQ8053-AA); affected Vision Intelligence 200 Platform (APQ8053-AC); affected WCD9326; affected WCD9330; affected WCD9335; affected WCD9340; affected WCN3610; affected WCN3615; affected WCN3620; affected WCN3660B; affected WCN3680; affected WCN3680B; affected WCN3980; affected WSA8810; affected WSA8815

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected 9206 LTE Modem; affected APQ8017; affected AR8031; affected C-V2X 9150; affected CSRA6620; affected CSRA6640; affected FastConnect 6200; affected FastConnect 6900; affected MDM9250; affected MDM9628; affected MDM9640; affected MDM9650; affected MSM8996AU; affected QCA6174; affected QCA6174A; affected QCA6175A; affected QCA6554A; affected QCA6564A; affected QCA6564AU; affected QCA6574; affected QCA6574A; affected QCA6574AU; affected QCA6584; affected QCA6584AU; affected QCA6595; affected QCA6595AU; affected QCA6696; affected QCA9367; affected QCA9377; affected QCA9379; affected QCM2150; affected QEP8111; affected Qualcomm 205 Mobile Platform; affected Qualcomm 215 Mobile Platform; affected SA2150P; affected SD626; affected SDM429W; affected Smart Audio 200 Platform; affected Smart Audio 400 Platform; affected Smart Display 200 Platform (APQ5053-AA); affected Snapdragon 1200 Wearable Platform; affected Snapdragon 210 Processor; affected Snapdragon 212 Mobile Platform; affected Snapdragon 425 Mobile Platform; affected Snapdragon 429 Mobile Platform; affected Snapdragon 439 Mobile Platform; affected Snapdragon 625 Mobile Platform; affected Snapdragon 626 Mobile Platform; affected Snapdragon 632 Mobile Platform; affected Snapdragon 820 Automotive Platform; affected Snapdragon Auto 5G Modem-RF; affected Snapdragon X12 LTE Modem; affected Snapdragon X35 5G Modem-RF System; affected Snapdragon X5 LTE Modem; affected Vision Intelligence 100 Platform (APQ8053-AA); affected Vision Intelligence 200 Platform (APQ8053-AC); affected WCD9326; affected WCD9330; affected WCD9335; affected WCD9340; affected WCN3610; affected WCN3615; affected WCN3620; affected WCN3660B; affected WCN3680; affected WCN3680B; affected WCN3980; affected WSA8810; affected WSA8815

CWE

CWE-126

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.