CVE-2025-21476 — Buffer Copy Without Checking Size of Input in Computer Vision

Description (CNA)

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected QCM5430; affected QCM6490; affected QCM8550; affected QCS5430; affected QCS615; affected QCS6490; affected QCS8550; affected QCS9100; affected SG8275; affected SG8275P; affected SM6650; affected SM7635; affected SM7675; affected SM7675P; affected SM8550; affected SM8550P; affected SM8635; affected SM8635P; affected SM8650; affected SM8650P; affected SM8650Q; affected SM8750; affected SM8750P; affected SXR2330P; affected QCA6391; affected QCA6698AQ; affected QCN9011; affected QCN9012; affected QCN9274; affected WCN3910; affected WCN3950; affected WCN6650; affected WCN6750; affected WCN6755; affected WCN6855; affected WCN6856; affected WCN7850; affected WCN7851; affected WCN7860; affected WCN7861; affected WCN7880; affected WCN7881

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected QCM5430; affected QCM6490; affected QCM8550; affected QCS5430; affected QCS615; affected QCS6490; affected QCS8550; affected QCS9100; affected SG8275; affected SG8275P; affected SM6650; affected SM7635; affected SM7675; affected SM7675P; affected SM8550; affected SM8550P; affected SM8635; affected SM8635P; affected SM8650; affected SM8650P; affected SM8650Q; affected SM8750; affected SM8750P; affected SXR2330P; affected QCA6391; affected QCA6698AQ; affected QCN9011; affected QCN9012; affected QCN9274; affected WCN3910; affected WCN3950; affected WCN6650; affected WCN6750; affected WCN6755; affected WCN6855; affected WCN6856; affected WCN7850; affected WCN7851; affected WCN7860; affected WCN7861; affected WCN7880; affected WCN7881

CWE

CWE-120

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.