Information Disclosure Vulnerability in Qualcomm Products
CVE-2025-21464

6.5MEDIUM

Key Information:

Vendor

Qualcomm
Status
Snapdragon
Vendor
CVE Published:
6 August 2025

What is CVE-2025-21464?

An information disclosure vulnerability exists in the Qualcomm Imaging SDK that allows attackers to exploit specific offset and size parameters while reading data from an image. This flaw could potentially expose sensitive information, compromising the confidentiality of data processed by affected systems.

Affected Version(s)

Snapdragon Snapdragon Auto 315 5G IoT Modem

Snapdragon Snapdragon Auto 9205 LTE Modem

Snapdragon Snapdragon Auto AQT1000

References

https://docs.qualcomm.com/product/publicresources/securit...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-21464 : Information Disclosure Vulnerability in Qualcomm Products