CVE-2025-21457
6.1 mediumEPSS 0.09%
Medium (6.1) in qualcomm. EPSS 0.09% chance of exploitation in the next 30 days.
Information disclosure while opening a fastrpc session when domain is not sanitized.
Severity
CVSS 3.1
6.1 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L- EPSS
- 0.09% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
- CWE
- CWE-126
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:ar8035_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:qca6584au_firmware
- qualcomm:qca6698aq_firmware
- qualcomm:qca8081_firmware
- qualcomm:qca8337_firmware
- qualcomm:qcc710_firmware
- qualcomm:qcn6224_firmware
- qualcomm:qcn6274_firmware
- qualcomm:qfw7114_firmware
- qualcomm:qfw7124_firmware
- qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware
- qualcomm:snapdragon_x72_5g_modem-rf_system_firmware
- qualcomm:snapdragon_x75_5g_modem-rf_system_firmware
- qualcomm:wcd9340_firmware
References
Check your stackJSON