Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2025-21486Untrusted Pointer Dereference in DSP Service

Description

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

Timeline

  1. ID reserved

    By qualcomm

  2. · 6 months later

    Published

  3. · 9 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2025-21486, by who scored it
Scored byCVSSScoreVector
qualcommCNA (assigner)3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Analyzed3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.10% · top 99% of all CVEs (12 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Affected products

  • Qualcomm, Inc. · Snapdragon

    • affected FastConnect 6900
    • affected FastConnect 7800
    • affected QMP1000
    • affected SM8735
    • affected SM8750
    • affected SM8750P
    • affected Snapdragon W5+ Gen 1 Wearable Platform
    • affected SW5100
    • affected SW5100P
    • affected SXR2230P
    • affected SXR2250P
    • affected SXR2330P
    • affected WCD9378
    • affected WCD9380
    • affected WCD9385
    • affected WCD9395
    • affected WCN3660B
    • affected WCN3680B
    • affected WCN3980
    • affected WCN3988
    • affected WCN7750
    • affected WCN7860
    • affected WCN7861
    • affected WCN7880
    • affected WCN7881
    • affected WSA8830
    • affected WSA8832
    • affected WSA8835
    • affected WSA8840
    • affected WSA8845
    • affected WSA8845H

References

References1

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2025-21486 badge
[![CVE-2025-21486](https://cveledger.app/badge/CVE-2025-21486.svg)](https://cveledger.app/cve/CVE-2025-21486)

Record last updated .