Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-21474

Use After Free in BTHOST

Description

Memory corruption while processing commands from A2dp sink command queue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • FastConnect 6800affected
  • FastConnect 6900affected
  • FastConnect 7800affected
  • QAM8295Paffected
  • QCA6391affected
  • QCA6426affected
  • QCA6436affected
  • QCA6574AUaffected
  • QCA6696affected
  • QCN9074affected
  • QCS410affected
  • QCS610affected
  • Qualcomm Video Collaboration VC1 Platformaffected
  • Qualcomm Video Collaboration VC3 Platformaffected
  • SA6145Paffected
  • SA6150Paffected
  • SA6155Paffected
  • SA8145Paffected
  • SA8150Paffected
  • SA8155Paffected
  • SA8195Paffected
  • SA8295Paffected
  • SD865 5Gaffected
  • Snapdragon 8 Gen 1 Mobile Platformaffected
  • Snapdragon 865 5G Mobile Platformaffected
  • Snapdragon 865+ 5G Mobile Platform (SM8250-AB)affected
  • Snapdragon 870 5G Mobile Platform (SM8250-AC)affected
  • Snapdragon W5+ Gen 1 Wearable Platformaffected
  • Snapdragon X55 5G Modem-RF Systemaffected
  • Snapdragon XR2 5G Platformaffected
  • SW5100affected
  • SW5100Paffected
  • SXR2130affected
  • WCD9341affected
  • WCD9370affected
  • WCD9380affected
  • WCN3660Baffected
  • WCN3680Baffected
  • WCN3950affected
  • WCN3980affected
  • WCN3988affected
  • WSA8810affected
  • WSA8815affected
  • WSA8830affected
  • WSA8835affected

References