Skip to content
OpenAdvisories
High · 7.8 CVE-2025-21458 EUVD-2025-23806GHSA-fp8f-972w-5xq2

Use After Free in NPU

Published Aug 6, 2025 · Updated Feb 26, 2026 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon FastConnect 6900, QAM8255P, QAM8650P, QAM8775P, QCA6174A, QCA6698AQ, QCA6797AQ, SA7255P, SA7775P, SA8255P, SA8620P, SA8650P, SA8775P, SA9000P, Snapdragon 888 5G Mobile Platform, Snapdragon 888+ 5G Mobile Platform (SM8350-AC), SW5100, SW5100P, WCD9380, WCD9385, WCN3980, WCN3988, WSA8830, WSA8835 —

References