CVE-2025-21483

Katalog CVE

CVSS 9.8 · Critical EPSS 0,42%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada qualcomm apq8017 firmware, qualcomm apq8064au firmware +58 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut qualcomm.com.

Deskripsi (NVD)

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Rincian

Terbit di NVD

24 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber qualcomm.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 34,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 227 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html advisory vendor