Search/CVE-2025-21488
● CVE — High

CVE-2025-21488

VendorqualcommProductmsm8996au firmware, qca6574 firmware, qca6574au firmware, qca6564 firmware, sa6155p firmware, qcs610 firmware, sa8155p firmware, sa6145p firmware, sa6155 firmware, sa8155 firmware, qcs410 firmware, qca6564a firmware, qca6564au firmware, qca6574a firmware, qca6595au firmware, qca6696 firmware, qcm4490 firmware, qcs4490 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 6200 firmware, fastconnect 7800 firmware, video collaboration vc3 platform firmware, video collaboration vc1 platform firmware, qmp1000 firmwareDiscoveredSep 24, 2025UpdatedSep 26, 2026

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

View graph Watch Export
CVSS v3.1
8.2 HIGH
EPSS
0.27%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Aug 26, 2026
▲ 0.02pp
0.25% → 0.27% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityLOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
Connections
26 relationships
Timeline
disclosure → media coverage
Sep 24, 2025
Disclosure — published as a CVE record. · last revised by NVD Sep 26, 2026