CVE-2025-21487 8.2 high EPSS 0.3%
High (8.2) in qualcomm. EPSS 0.3% chance of exploitation in the next 30 days.
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Severity
CVSS 3.1 8.2 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:LEnable JavaScript to see the metric table and diagram.
EPSS 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE CWE-126
Published 2025-09-24
Modified 2026-09-26
Record from the NVD, synced 2026-10-19 Affected qualcomm:205_mobile_platform_firmware qualcomm:215_mobile_platform_firmware qualcomm:apq8017_firmware qualcomm:apq8064au_firmware qualcomm:aqt1000_firmware qualcomm:fastconnect_6200_firmware qualcomm:fastconnect_6700_firmware qualcomm:fastconnect_6800_firmware qualcomm:fastconnect_6900_firmware qualcomm:fastconnect_7800_firmware qualcomm:msm8996au_firmware qualcomm:qam8255p_firmware qualcomm:qam8295p_firmware qualcomm:qam8620p_firmware qualcomm:qam8650p_firmware qualcomm:qam8775p_firmware qualcomm:qamsrv1h_firmware qualcomm:qamsrv1m_firmware qualcomm:qca6310_firmware qualcomm:qca6320_firmware qualcomm:qca6335_firmware qualcomm:qca6391_firmware qualcomm:qca6420_firmware qualcomm:qca6426_firmware qualcomm:qca6430_firmware qualcomm:qca6436_firmware qualcomm:qca6564_firmware qualcomm:qca6564a_firmware qualcomm:qca6564au_firmware qualcomm:qca6574_firmware qualcomm:qca6574a_firmware qualcomm:qca6574au_firmware qualcomm:qca6595_firmware qualcomm:qca6595au_firmware qualcomm:qca6678aq_firmware qualcomm:qca6688aq_firmware qualcomm:qca6696_firmware qualcomm:qca6698aq_firmware qualcomm:qca6797aq_firmware qualcomm:qcm2150_firmware qualcomm:qcm2290_firmware qualcomm:qcm4290_firmware qualcomm:qcm4325_firmware qualcomm:qcm4490_firmware qualcomm:qcm5430_firmware qualcomm:qcm6125_firmware qualcomm:qcm6490_firmware qualcomm:qcm8550_firmware qualcomm:qcn9274_firmware qualcomm:qcs2290_firmware References Check your stack JSON