Skip to content
OpenAdvisories
High · 7.8 CVE-2025-21476 EUVD-2025-31004GHSA-m9g8-x7f2-2hgc

Buffer Copy Without Checking Size of Input in Computer Vision

Published Sep 24, 2025 · Updated Feb 26, 2026 · Assigned by qualcomm

Description

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon QCM5430, QCM6490, QCM8550, QCS5430, QCS615, QCS6490, QCS8550, QCS9100, SG8275, SG8275P, SM6650, SM7635, SM7675, SM7675P, SM8550, SM8550P, SM8635, SM8635P, SM8650, SM8650P, SM8650Q, SM8750, SM8750P, SXR2330P, QCA6391, QCA6698AQ, QCN9011, QCN9012, QCN9274, WCN3910, WCN3950, WCN6650, WCN6750, WCN6755,… —

References