Skip to content
OpenAdvisories
High · 8.2 CVE-2025-21487 EUVD-2025-30999GHSA-j4c6-9q52-52q7

Buffer Over-read in Data Network Stack & Connectivity

Published Sep 24, 2025 · Updated Sep 25, 2025 · Assigned by qualcomm

Description

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon APQ8017, APQ8064AU, AQT1000, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, MSM8996AU, QAM8255P, QAM8295P, QAM8620P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6310, QCA6320, QCA6335, QCA6391, QCA6420, QCA6426, QCA6430, QCA6436, QCA6564, QCA6564A, QCA6564A… —

Advisories 2

References