BDU:2025-09570

Опубликовано: 07 июл. 2025

Источник: fstec

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании

Вендор

Qualcomm Technologies Inc.

Наименование ПО

IPQ8064

QCA9980

SD 8 Gen1 5G

WCD9380

WSA8830

WSA8835

AR8035

Snapdragon 865 5G Mobile Platform

Snapdragon 865+ 5G Mobile Platform (SM8250-AB)

Snapdragon 870 5G Mobile Platform (SM8250-AC)

Snapdragon X55 5G Modem-RF System

Snapdragon XR2 5G Platform

Snapdragon 8 Gen 1 Mobile Platform

Snapdragon 888 5G Mobile Platform

Snapdragon 888+ 5G Mobile Platform (SM8350-AC)

Snapdragon 778G 5G Mobile Platform

Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)

Snapdragon 780G 5G Mobile Platform

Snapdragon 782G Mobile Platform (SM7325-AF)

Snapdragon 8+ Gen 1 Mobile Platform

Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)

Snapdragon AR2 Gen 1 Platform

Snapdragon X65 5G Modem-RF System

Qualcomm® Video Collaboration VC3 Platform

Snapdragon 8 Gen 2 Mobile Platform

Snapdragon 8+ Gen 2 Mobile Platform

Snapdragon Auto 5G Modem-RF

Snapdragon X75 5G Modem-RF System

Immersive Home 214 Platform

Immersive Home 216 Platform

Immersive Home 316 Platform

Immersive Home 318 Platform

IPQ5010

IPQ5028

IPQ5332

IPQ8070A

IPQ8071A

IPQ8072A

IPQ8074A

IPQ8076

IPQ8076A

IPQ8078

IPQ8078A

IPQ8173

IPQ8174

IPQ9554

IPQ9570

QCA0000

QCA9889

QCF8000

QCF8001

QCN5024

QCN5124

QCN5154

QCN5164

QCN6112

QCN6122

QCN6132

QCN9100

SA8770P

AR9380

IPQ8065

IPQ8068

IPQ9008

IPQ9574

QCA2062

QCA2064

QCA2065

QCA2066

QCA6554A

QCA6564AU

QCA6574

QCA6574A

QCA6574AU

QCA6584AU

QCA6678AQ

QCA9886

QCA9888

QCA9985

QCA9986

QCA9990

QCA9992

QCA9994

QCC2073

QCC2076

QCN5054

QCN6100

QCN6102

QCN9001

QCN9002

QCN9003

QCN9022

Snapdragon 8 Gen 3 Mobile Platform

Snapdragon Auto 5G Modem-RF Gen 2

Snapdragon X35 5G Modem-RF System

SA8775P

QAM8620P

SA7775P

SA8620P

SA8650P

Snapdragon X62 5G Modem-RF System

Snapdragon X72 5G Modem-RF System

SRV1H

SRV1L

SRV1M

SXR2250P

QCA6688AQ

QCA6777AQ

QCA6787AQ

QCS9100

SM8750

SM8750P

WCN7860

WCN7861

WCN7880

WCN7881

FastConnect 6700

FastConnect 6900

FastConnect 7800

QCS4490

QCM4490

WCD9370

WCD9390

WCD9395

WCN3950

WCN6740

WSA8810

WSA8815

WSA8832

WSA8840

WSA8845

WSA8845H

CSR8811

IPQ6000

IPQ6010

IPQ6018

IPQ6028

IPQ9048

QAM8255P

QAM8295P

QAM8650P

QAM8775P

QAMSRV1H

QAMSRV1M

QCA4024

QCA6595

QCA6595AU

QCA6696

QCA6698AQ

QCA6797AQ

QCA8075

QCA8081

QCA8082

QCA8084

QCA8085

QCA8337

QCA8386

QCC710

QCM5430

QCM6490

QCM8550

QCN5022

QCN5052

QCN5122

QCN5152

QCN6023

QCN6024

QCN6224

QCN6274

QCN9000

QCN9012

QCN9024

QCN9070

QCN9072

QCN9074

QCN9274

QCS5430

QCS6490

QCS8550

QFW7114

QFW7124

SA6155P

SA7255P

SA8155P

SA8195P

SA8255P

SA8295P

SA9000P

SDX55

SM6650

SM7635

SM7675

SM7675P

SM8550P

SM8635

SM8635P

SXR2230P

SXR2330P

WCD9340

WCD9375

WCD9378

WCD9385

WCN6450

WCN6650

WCN6755

Snapdragon AR1 Gen 1 Platform "Luna1"

Snapdragon AR1 Gen 1 Platform

SM6650P

SM8650Q

SM8735

QMP1000

WCN7750

Snapdragon X32 5G Modem-RF System

SM7635P

FastConnect 6800

QCA6174A

QCA6391

QCA6421

QCA6426

QCA6431

QCA6436

QCA6698AU

QCN9011

QCS615

QCS8300

QEP8111

QSM8350

SC8380XP

SD865 5G

SD888

SDX61

SG8275P

SM7315

SM7325P

Snapdragon 7c+ Gen 3 Compute

SSG2115P

SSG2125P

SXR1230P

SXR2130

QCA8072

QCA9984

Версия ПО

- (IPQ8064)

- (QCA9980)

- (SD 8 Gen1 5G)

- (WCD9380)

- (WSA8830)

- (WSA8835)

- (AR8035)

- (Snapdragon 865 5G Mobile Platform)

- (Snapdragon 865+ 5G Mobile Platform (SM8250-AB))

- (Snapdragon 870 5G Mobile Platform (SM8250-AC))

- (Snapdragon X55 5G Modem-RF System)

- (Snapdragon XR2 5G Platform)

- (Snapdragon 8 Gen 1 Mobile Platform)

- (Snapdragon 888 5G Mobile Platform)

- (Snapdragon 888+ 5G Mobile Platform (SM8350-AC))

- (Snapdragon 778G 5G Mobile Platform)

- (Snapdragon 778G+ 5G Mobile Platform (SM7325-AE))

- (Snapdragon 780G 5G Mobile Platform)

- (Snapdragon 782G Mobile Platform (SM7325-AF))

- (Snapdragon 8+ Gen 1 Mobile Platform)

- (Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB))

- (Snapdragon AR2 Gen 1 Platform)

- (Snapdragon X65 5G Modem-RF System)

- (Qualcomm® Video Collaboration VC3 Platform)

- (Snapdragon 8 Gen 2 Mobile Platform)

- (Snapdragon 8+ Gen 2 Mobile Platform)

- (Snapdragon Auto 5G Modem-RF)

- (Snapdragon X75 5G Modem-RF System)

- (Immersive Home 214 Platform)

- (Immersive Home 216 Platform)

- (Immersive Home 316 Platform)

- (Immersive Home 318 Platform)

- (IPQ5010)

- (IPQ5028)

- (IPQ5332)

- (IPQ8070A)

- (IPQ8071A)

- (IPQ8072A)

- (IPQ8074A)

- (IPQ8076)

- (IPQ8076A)

- (IPQ8078)

- (IPQ8078A)

- (IPQ8173)

- (IPQ8174)

- (IPQ9554)

- (IPQ9570)

- (QCA0000)

- (QCA9889)

- (QCF8000)

- (QCF8001)

- (QCN5024)

- (QCN5124)

- (QCN5154)

- (QCN5164)

- (QCN6112)

- (QCN6122)

- (QCN6132)

- (QCN9100)

- (SA8770P)

- (AR9380)

- (IPQ8065)

- (IPQ8068)

- (IPQ9008)

- (IPQ9574)

- (QCA2062)

- (QCA2064)

- (QCA2065)

- (QCA2066)

- (QCA6554A)

- (QCA6564AU)

- (QCA6574)

- (QCA6574A)

- (QCA6574AU)

- (QCA6584AU)

- (QCA6678AQ)

- (QCA9886)

- (QCA9888)

- (QCA9985)

- (QCA9986)

- (QCA9990)

- (QCA9992)

- (QCA9994)

- (QCC2073)

- (QCC2076)

- (QCN5054)

- (QCN6100)

- (QCN6102)

- (QCN9001)

- (QCN9002)

- (QCN9003)

- (QCN9022)

- (Snapdragon 8 Gen 3 Mobile Platform)

- (Snapdragon Auto 5G Modem-RF Gen 2)

- (Snapdragon X35 5G Modem-RF System)

- (SA8775P)

- (QAM8620P)

- (SA7775P)

- (SA8620P)

- (SA8650P)

- (Snapdragon X62 5G Modem-RF System)

- (Snapdragon X72 5G Modem-RF System)

- (SRV1H)

- (SRV1L)

- (SRV1M)

- (SXR2250P)

- (QCA6688AQ)

- (QCA6777AQ)

- (QCA6787AQ)

- (QCS9100)

- (SM8750)

- (SM8750P)

- (WCN7860)

- (WCN7861)

- (WCN7880)

- (WCN7881)

- (FastConnect 6700)

- (FastConnect 6900)

- (FastConnect 7800)

- (QCS4490)

- (QCM4490)

- (WCD9370)

- (WCD9390)

- (WCD9395)

- (WCN3950)

- (WCN6740)

- (WSA8810)

- (WSA8815)

- (WSA8832)

- (WSA8840)

- (WSA8845)

- (WSA8845H)

- (CSR8811)

- (IPQ6000)

- (IPQ6010)

- (IPQ6018)

- (IPQ6028)

- (IPQ9048)

- (QAM8255P)

- (QAM8295P)

- (QAM8650P)

- (QAM8775P)

- (QAMSRV1H)

- (QAMSRV1M)

- (QCA4024)

- (QCA6595)

- (QCA6595AU)

- (QCA6696)

- (QCA6698AQ)

- (QCA6797AQ)

- (QCA8075)

- (QCA8081)

- (QCA8082)

- (QCA8084)

- (QCA8085)

- (QCA8337)

- (QCA8386)

- (QCC710)

- (QCM5430)

- (QCM6490)

- (QCM8550)

- (QCN5022)

- (QCN5052)

- (QCN5122)

- (QCN5152)

- (QCN6023)

- (QCN6024)

- (QCN6224)

- (QCN6274)

- (QCN9000)

- (QCN9012)

- (QCN9024)

- (QCN9070)

- (QCN9072)

- (QCN9074)

- (QCN9274)

- (QCS5430)

- (QCS6490)

- (QCS8550)

- (QFW7114)

- (QFW7124)

- (SA6155P)

- (SA7255P)

- (SA8155P)

- (SA8195P)

- (SA8255P)

- (SA8295P)

- (SA9000P)

- (SDX55)

- (SM6650)

- (SM7635)

- (SM7675)

- (SM7675P)

- (SM8550P)

- (SM8635)

- (SM8635P)

- (SXR2230P)

- (SXR2330P)

- (WCD9340)

- (WCD9375)

- (WCD9378)

- (WCD9385)

- (WCN6450)

- (WCN6650)

- (WCN6755)

- (Snapdragon AR1 Gen 1 Platform "Luna1")

- (Snapdragon AR1 Gen 1 Platform)

- (SM6650P)

- (SM8650Q)

- (SM8735)

- (QMP1000)

- (WCN7750)

- (Snapdragon X32 5G Modem-RF System)

- (SM7635P)

- (FastConnect 6800)

- (QCA6174A)

- (QCA6391)

- (QCA6421)

- (QCA6426)

- (QCA6431)

- (QCA6436)

- (QCA6698AU)

- (QCN9011)

- (QCS615)

- (QCS8300)

- (QEP8111)

- (QSM8350)

- (SC8380XP)

- (SD865 5G)

- (SD888)

- (SDX61)

- (SG8275P)

- (SM7315)

- (SM7325P)

- (Snapdragon 7c+ Gen 3 Compute)

- (SSG2115P)

- (SSG2125P)

- (SXR1230P)

- (SXR2130)

- (QCA8072)

- (QCA9984)

Тип ПО

Микропрограммный код

Сетевое средство

Микропрограммный код аппаратных компонент компьютера

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 7,8)

Высокий уровень опасности (базовая оценка CVSS 3.1 составляет 7,5)

Возможные меры по устранению уязвимости

Использование рекомендаций производителя:

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html

Идентификаторы других систем описаний уязвимостей

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-21446
CVE

EPSS

Процентиль: 22%

0.00073

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Связанные уязвимости

CVE-2025-21446

CVSS3: 7.5

nvd

7 месяцев назад

Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.

GHSA-vr8p-mwh4-q7pp

CVSS3: 7.5

github

7 месяцев назад

Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.

EPSS

Процентиль: 22%

0.00073

Низкий

7.5 High

CVSS3

7.8 High

CVSS2