CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2025-21486
High (7.8) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
- CWE
- CWE-822
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:qmp1000_firmware
- qualcomm:sm8735_firmware
- qualcomm:sm8750_firmware
- qualcomm:sm8750p_firmware
- qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware
- qualcomm:sw5100_firmware
- qualcomm:sw5100p_firmware
- qualcomm:sxr2230p_firmware
- qualcomm:sxr2250p_firmware
- qualcomm:sxr2330p_firmware
- qualcomm:wcd9378_firmware
- qualcomm:wcd9380_firmware
- qualcomm:wcd9385_firmware
- qualcomm:wcd9395_firmware
- qualcomm:wcn3660b_firmware
- qualcomm:wcn3680b_firmware
- qualcomm:wcn3980_firmware
- qualcomm:wcn3988_firmware
- qualcomm:wcn7750_firmware
- qualcomm:wcn7860_firmware
- qualcomm:wcn7861_firmware
- qualcomm:wcn7880_firmware
- qualcomm:wcn7881_firmware
- qualcomm:wsa8830_firmware
- qualcomm:wsa8832_firmware
- qualcomm:wsa8835_firmware
- qualcomm:wsa8840_firmware
- qualcomm:wsa8845_firmware
- qualcomm:wsa8845h_firmware