Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-21486

Untrusted Pointer Dereference in DSP Service

Description

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • FastConnect 6900affected
  • FastConnect 7800affected
  • QMP1000affected
  • SM8735affected
  • SM8750affected
  • SM8750Paffected
  • Snapdragon W5+ Gen 1 Wearable Platformaffected
  • SW5100affected
  • SW5100Paffected
  • SXR2230Paffected
  • SXR2250Paffected
  • SXR2330Paffected
  • WCD9378affected
  • WCD9380affected
  • WCD9385affected
  • WCD9395affected
  • WCN3660Baffected
  • WCN3680Baffected
  • WCN3980affected
  • WCN3988affected
  • WCN7750affected
  • WCN7860affected
  • WCN7861affected
  • WCN7880affected
  • WCN7881affected
  • WSA8830affected
  • WSA8832affected
  • WSA8835affected
  • WSA8840affected
  • WSA8845affected
  • WSA8845Haffected

References