Search/CVE-2025-21476
● CVE — High

CVE-2025-21476

VendorqualcommProductqca6391 firmware, qcs6490 firmware, qcn9011 firmware, qcn9012 firmware, wcn3910 firmware, sg8275 firmware, sg8275p firmware, sm8550 firmware, qca6698aq firmware, qcs8550 firmware, sm8550p firmware, qcn9274 firmware, sm8635 firmware, sm8750 firmware, sm8750p firmware, sm7675 firmware, sm7675p firmware, sm8635p firmware, sm6650 firmware, sm7635 firmware, sxr2330p firmware, qcs9100 firmware, sm8650q firmware, sm8650 firmware, sm8650p firmwareDiscoveredSep 24, 2025UpdatedSep 25, 2025

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

View graph Watch Export
CVSS v3.1
7.8 HIGH
EPSS
0.09%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
● 0.01pp
0.08% → 0.09% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Sep 24, 2025
Disclosure — published as a CVE record.