Memory Corruption Vulnerability in Qualcomm Products
CVE-2025-21456

7.8HIGH

Key Information:

Vendor

Qualcomm

Vendor
CVE Published:
6 August 2025

What is CVE-2025-21456?

This vulnerability allows for memory corruption during the processing of IOCTL commands when multiple threads attempt to map or unmap buffers simultaneously, potentially leading to unpredictable behavior and system instability. This issue is pertinent to various Qualcomm chipsets, highlighting the need for immediate review and mitigation steps for affected systems to ensure security and reliable operation.

Affected Version(s)

Snapdragon Snapdragon Auto AR8035

Snapdragon Snapdragon Auto C-V2X 9150

Snapdragon Snapdragon Auto FastConnect 6900

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-21456 : Memory Corruption Vulnerability in Qualcomm Products