CVE-2025-21439 — Out-of-bounds Read in Windows WLAN Host

Description (CNA)

Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected FastConnect 6700; affected FastConnect 6900; affected QCA6595AU; affected QCM5430; affected QCM6490; affected QCN7605; affected QCN7606; affected QCS5430; affected QCS6490; affected Qualcomm Video Collaboration VC3 Platform; affected SC8180X+SDX55; affected Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite"; affected Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"; affected Snapdragon 8cx Compute Platform (SC8180X-AA, AB); affected Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro"; affected Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro"; affected Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB); affected WCD9370; affected WCD9375; affected WCD9380; affected WCD9385

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected FastConnect 6700; affected FastConnect 6900; affected QCA6595AU; affected QCM5430; affected QCM6490; affected QCN7605; affected QCN7606; affected QCS5430; affected QCS6490; affected Qualcomm Video Collaboration VC3 Platform; affected SC8180X+SDX55; affected Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite"; affected Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"; affected Snapdragon 8cx Compute Platform (SC8180X-AA, AB); affected Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro"; affected Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro"; affected Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB); affected WCD9370; affected WCD9375; affected WCD9380; affected WCD9385

CWE

CWE-787

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.