CVE-2025-21468: qualcomm, inc. snapdragon Out-of-bounds Write

Vulnerability summary

CVE-2025-21468 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in qualcomm, inc. snapdragon. EPSS estimates a 0.11% chance of exploitation in the next 30 days, higher than 1% of scored vulnerabilities.

Timeline

1. 06-05-2025
   PublishedVulnerability first disclosed.
2. 26-02-2026
   Last modifiedVulnerability information updated.

Description

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.