CVE-2025-21456High· 7.8▾ TwilightMemory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.09%
Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
Snapdragon AR8035Snapdragon C-V2X 9150Snapdragon FastConnect 6900Snapdragon FastConnect 7800Snapdragon QAM8255PSnapdragon QAM8295PSnapdragon QAM8650PSnapdragon QAM8775PSnapdragon QCA6174ASnapdragon QCA6574AUSnapdragon QCA6584AUSnapdragon QCA6696Snapdragon QCA6698AQSnapdragon QCA6797AQSnapdragon QCA8081Snapdragon QCA8337Snapdragon QCC710Snapdragon QCN6224Snapdragon QCN6274Snapdragon QCS410Snapdragon QCS610Snapdragon QFW7114Snapdragon QFW7124Snapdragon Qualcomm Video Collaboration VC1 PlatformSnapdragon Qualcomm Video Collaboration VC3 PlatformSnapdragon SA6145PSnapdragon SA6150PSnapdragon SA6155PSnapdragon SA7255PSnapdragon SA7775PSnapdragon SA8145PSnapdragon SA8150PSnapdragon SA8155PSnapdragon SA8195PSnapdragon SA8255PSnapdragon SA8295PSnapdragon SA8530PSnapdragon SA8540PSnapdragon SA8620PSnapdragon SA8650PSnapdragon SA8775PSnapdragon SA9000PSnapdragon Snapdragon 888 5G Mobile PlatformSnapdragon Snapdragon 888+ 5G Mobile Platform (SM8350-AC)Snapdragon Snapdragon Auto 5G Modem-RF Gen 2Snapdragon Snapdragon W5+ Gen 1 Wearable PlatformSnapdragon Snapdragon X72 5G Modem-RF SystemSnapdragon Snapdragon X75 5G Modem-RF SystemSnapdragon SW5100Snapdragon SW5100PRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-21461High· 7.8Out-of-bounds Write in Camera_Linux
CVE-2025-21473High· 7.8Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux
CVE-2025-21428High· 7.5Buffer Over-read in WLAN Host
CVE-2022-3256High· 7.8Use After Free in GitHub repository vim/vim prior to 9.0.0530.
CVE-2022-3297High· 7.8Use After Free in GitHub repository vim/vim prior to 9.0.0579.
CVE-2023-25747High· 7.5A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects Firefox for Android