CVE-2025-21428High· 7.5▾ TwilightMemory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.3%
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
Snapdragon 9206 LTE ModemSnapdragon APQ8017Snapdragon AR8031Snapdragon C-V2X 9150Snapdragon CSRA6620Snapdragon CSRA6640Snapdragon FastConnect 6200Snapdragon FastConnect 6900Snapdragon MDM9250Snapdragon MDM9628Snapdragon MDM9640Snapdragon MDM9650Snapdragon MSM8996AUSnapdragon QCA6174Snapdragon QCA6174ASnapdragon QCA6175ASnapdragon QCA6554ASnapdragon QCA6564ASnapdragon QCA6564AUSnapdragon QCA6574Snapdragon QCA6574ASnapdragon QCA6574AUSnapdragon QCA6584Snapdragon QCA6584AUSnapdragon QCA6595Snapdragon QCA6595AUSnapdragon QCA6696Snapdragon QCA9367Snapdragon QCA9377Snapdragon QCA9379Snapdragon QCM2150Snapdragon QEP8111Snapdragon Qualcomm 205 Mobile PlatformSnapdragon Qualcomm 215 Mobile PlatformSnapdragon SA2150PSnapdragon SD626Snapdragon SDM429WSnapdragon Smart Audio 200 PlatformSnapdragon Smart Audio 400 PlatformSnapdragon Smart Display 200 Platform (APQ5053-AA)Snapdragon Snapdragon 1200 Wearable PlatformSnapdragon Snapdragon 210 ProcessorSnapdragon Snapdragon 212 Mobile PlatformSnapdragon Snapdragon 425 Mobile PlatformSnapdragon Snapdragon 429 Mobile PlatformSnapdragon Snapdragon 439 Mobile PlatformSnapdragon Snapdragon 625 Mobile PlatformSnapdragon Snapdragon 626 Mobile PlatformSnapdragon Snapdragon 632 Mobile PlatformSnapdragon Snapdragon 820 Automotive PlatformRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-21461High· 7.8Out-of-bounds Write in Camera_Linux
CVE-2025-21473High· 7.8Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux
CVE-2025-21456High· 7.8Use After Free in NPU
CVE-2024-31082High· 7.3Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap
CVE-2024-31081High· 7.3Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice
CVE-2024-31080High· 7.3Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents