Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-21458

Use After Free in NPU

Description

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • FastConnect 6900affected
  • QAM8255Paffected
  • QAM8650Paffected
  • QAM8775Paffected
  • QCA6174Aaffected
  • QCA6698AQaffected
  • QCA6797AQaffected
  • SA7255Paffected
  • SA7775Paffected
  • SA8255Paffected
  • SA8620Paffected
  • SA8650Paffected
  • SA8775Paffected
  • SA9000Paffected
  • Snapdragon 888 5G Mobile Platformaffected
  • Snapdragon 888+ 5G Mobile Platform (SM8350-AC)affected
  • SW5100affected
  • SW5100Paffected
  • WCD9380affected
  • WCD9385affected
  • WCN3980affected
  • WCN3988affected
  • WSA8830affected
  • WSA8835affected

References