CVE-2025-21423: qualcomm aqt1000 firmware +44 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2025-21423

CVSS 7.8 · High EPSS 0,11%

Kerentanan Improper Validation of Array Index pada qualcomm aqt1000 firmware, qualcomm fastconnect 6200 firmware +43 lainnya. Skor CVSS 3.1 7.8 (High) menurut qualcomm.com.

Deskripsi (NVD)

Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.

Rincian

Terbit di NVD: 7 April 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 7.8 (High), sumber qualcomm.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-129: Improper Validation of Array Index
EPSS (30 hari): 0,11% peluang dieksploitasi; lebih tinggi dari 1,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
qualcomm	aqt1000 firmware	Semua versi
qualcomm	fastconnect 6200 firmware	Semua versi
qualcomm	fastconnect 6700 firmware	Semua versi
qualcomm	fastconnect 6800 firmware	Semua versi
qualcomm	fastconnect 6900 firmware	Semua versi
qualcomm	fastconnect 7800 firmware	Semua versi
qualcomm	qca6391 firmware	Semua versi
qualcomm	qca6420 firmware	Semua versi
qualcomm	qca6430 firmware	Semua versi
qualcomm	qcm5430 firmware	Semua versi
qualcomm	qcm6490 firmware	Semua versi
qualcomm	qcs5430 firmware	Semua versi
qualcomm	qcs6490 firmware	Semua versi
qualcomm	video collaboration vc3 platform firmware	Semua versi
qualcomm	sc8180x+sdx55 firmware	Semua versi
qualcomm	sc8380xp firmware	Semua versi
qualcomm	sm6250 firmware	Semua versi
qualcomm	snapdragon 7c compute platform (sc7180-ac) firmware	Semua versi
qualcomm	snapdragon 7c gen 2 compute platform (sc7180-ad) "rennell pro" firmware	Semua versi
qualcomm	snapdragon 7c+ gen 3 compute firmware	Semua versi
qualcomm	snapdragon 8c compute platform (sc8180x-ad) firmware	Semua versi
qualcomm	snapdragon 8c compute platform (sc8180xp-ad) firmware	Semua versi
qualcomm	snapdragon 8cx compute platform (sc8180x-aa) firmware	Semua versi
qualcomm	snapdragon 8cx compute platform (sc8180x-ab) firmware	Semua versi
qualcomm	snapdragon 8cx compute platform (sc8180xp-ac) firmware	Semua versi
qualcomm	snapdragon 8cx compute platform (sc8180xp-af) firmware	Semua versi
qualcomm	snapdragon 8cx gen 2 5g compute platform (sc8180x-ac) firmware	Semua versi
qualcomm	snapdragon 8cx gen 2 5g compute platform (sc8180x-af) firmware	Semua versi
qualcomm	snapdragon 8cx gen 2 5g compute platform (sc8180xp-aa) firmware	Semua versi
qualcomm	snapdragon 8cx gen 2 5g compute platform (sc8180xp-ab) firmware	Semua versi
qualcomm	snapdragon 8cx gen 3 compute platform (sc8280xp-ab) firmware	Semua versi
qualcomm	snapdragon 8cx gen 3 compute platform (sc8280xp-bb) firmware	Semua versi
qualcomm	wcd9340 firmware	Semua versi
qualcomm	wcd9341 firmware	Semua versi
qualcomm	wcd9370 firmware	Semua versi
qualcomm	wcd9375 firmware	Semua versi
qualcomm	wcd9380 firmware	Semua versi
qualcomm	wcd9385 firmware	Semua versi
qualcomm	wsa8810 firmware	Semua versi
qualcomm	wsa8815 firmware	Semua versi
qualcomm	wsa8830 firmware	Semua versi
qualcomm	wsa8835 firmware	Semua versi
qualcomm	wsa8840 firmware	Semua versi
qualcomm	wsa8845 firmware	Semua versi
qualcomm	wsa8845h firmware	Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.