BDU:2025-09571

Опубликовано: 07 июл. 2025

Источник: fstec

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании

Вендор

Qualcomm Technologies Inc.

Наименование ПО

SD 8 Gen1 5G

AQT1000

AR8031

AR8035

CSRA6620

CSRA6640

SD460

SD662

SD675

SD730

SD660

SD670

SD820

SD855

Snapdragon 855 Mobile Platform

Snapdragon 855+/860 Mobile Platform (SM8150-AC)

Snapdragon 865 5G Mobile Platform

Snapdragon 865+ 5G Mobile Platform (SM8250-AB)

Snapdragon 870 5G Mobile Platform (SM8250-AC)

Snapdragon W5+ Gen 1 Wearable Platform

Snapdragon X55 5G Modem-RF System

Snapdragon XR2 5G Platform

Snapdragon Auto 4G Modem

Snapdragon X50 5G Modem-RF System

Snapdragon 8 Gen 1 Mobile Platform

Snapdragon 888 5G Mobile Platform

Snapdragon 888+ 5G Mobile Platform (SM8350-AC)

Snapdragon 765 5G Mobile Platform (SM7250-AA)

Snapdragon 765G 5G Mobile Platform (SM7250-AB)

Snapdragon 768G 5G Mobile Platform (SM7250-AC)

Snapdragon 4 Gen 1 Mobile Platform

Snapdragon 460 Mobile Platform

Snapdragon 480 5G Mobile Platform

Snapdragon 480+ 5G Mobile Platform (SM4350-AC)

Snapdragon 662 Mobile Platform

Snapdragon 665 Mobile Platform

Snapdragon 670 Mobile Platform

Snapdragon 675 Mobile Platform

Snapdragon 678 Mobile Platform (SM6150-AC)

Snapdragon 680 4G Mobile Platform

Snapdragon 685 4G Mobile Platform (SM6225-AD)

Snapdragon 690 5G Mobile Platform

Snapdragon 695 5G Mobile Platform

Snapdragon 720G Mobile Platform

Snapdragon 730 Mobile Platform (SM7150-AA)

Snapdragon 730G Mobile Platform (SM7150-AB)

Snapdragon 732G Mobile Platform (SM7150-AC)

Snapdragon 750G 5G Mobile Platform

Snapdragon 778G 5G Mobile Platform

Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)

Snapdragon 780G 5G Mobile Platform

Snapdragon 782G Mobile Platform (SM7325-AF)

Snapdragon 7c Compute Platform (SC7180-AC)

Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) "Rennell Pro"

Snapdragon 8+ Gen 1 Mobile Platform

Snapdragon 845 Mobile Platform

Snapdragon 850 Mobile Compute Platform

Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite"

Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"

Snapdragon 8cx Compute Platform (SC8180X-AA, AB)

Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro"

Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro"

Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB)

Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)

Snapdragon AR2 Gen 1 Platform

Snapdragon X24 LTE Modem

Snapdragon X65 5G Modem-RF System

Snapdragon XR2+ Gen 1 Platform

Qualcomm® Video Collaboration VC1 Platform

Qualcomm® Video Collaboration VC3 Platform

Snapdragon 8 Gen 2 Mobile Platform

Snapdragon 8+ Gen 2 Mobile Platform

Snapdragon Auto 5G Modem-RF

Snapdragon X75 5G Modem-RF System

Immersive Home 214 Platform

Immersive Home 216 Platform

Immersive Home 316 Platform

Immersive Home 318 Platform

SA4155P

SA8770P

Snapdragon X12 LTE Modem

AR9380

Qualcomm® Video Collaboration VC5 Platform

Snapdragon 710 Mobile Platform

Snapdragon 712 Mobile Platform

Snapdragon 8 Gen 3 Mobile Platform

Snapdragon Auto 5G Modem-RF Gen 2

Snapdragon X35 5G Modem-RF System

Snapdragon XR1 Platform

SXR1120

SA4150P

SA8775P

Snapdragon X20 LTE Modem

Home Hub 100 Platform

Snapdragon X5 LTE Modem

SA7775P

SA8620P

SA8650P

SM6370

Snapdragon X62 5G Modem-RF System

Snapdragon X72 5G Modem-RF System

SRV1H

SRV1L

SRV1M

SXR2250P

SM4635

SM8750

SM8750P

FastConnect 6700

FastConnect 6900

FastConnect 7800

CSR8811

SA6155P

SA7255P

SA8155P

SA8195P

SA8255P

SA8295P

SA9000P

SDX55

SM6650

SM7635

SM7675

SM7675P

SM8550P

SM8635

SM8635P

SXR2230P

SXR2330P

Snapdragon AR1 Gen 1 Platform "Luna1"

Snapdragon AR1 Gen 1 Platform

SM6650P

SM8650Q

SM8735

Snapdragon X32 5G Modem-RF System

SM7635P

APQ8017

FastConnect 6200

FastConnect 6800

Flight RB5 5G Platform

Robotics RB2 Platform

Robotics RB5 Platform

SA6145P

SA6150P

SA6155

SA8145P

SA8150P

SA8155

SC8380XP

SD865 5G

SD888

SDX61

SG4150P

SG8275P

SM4125

SM6250

SM7250P

SM7315

SM7325P

Smart Audio 400 Platform

Snapdragon 4 Gen 2 Mobile Platform

Snapdragon 7c+ Gen 3 Compute

SSG2115P

SSG2125P

SW5100

SW5100P

SXR1230P

SXR2130

315 5G IoT Modem

APQ8064AU

CSRB31024

Robotics RB3 Platform

SC8180X+SDX55

SD 8CX

SD821

SDX20M

SM6250P

Smart Audio 200 Platform

Snapdragon 660 Mobile Platform

Snapdragon 820 Automotive Platform

Snapdragon 820 Mobile Platform

Snapdragon 821 Mobile Platform

Vision Intelligence 300 Platform

Vision Intelligence 400 Platform

Версия ПО

- (SD 8 Gen1 5G)

- (AQT1000)

- (AR8031)

- (AR8035)

- (CSRA6620)

- (CSRA6640)

- (SD460)

- (SD662)

- (SD675)

- (SD730)

- (SD660)

- (SD670)

- (SD820)

- (SD855)

- (Snapdragon 855 Mobile Platform)

- (Snapdragon 855+/860 Mobile Platform (SM8150-AC))

- (Snapdragon 865 5G Mobile Platform)

- (Snapdragon 865+ 5G Mobile Platform (SM8250-AB))

- (Snapdragon 870 5G Mobile Platform (SM8250-AC))

- (Snapdragon W5+ Gen 1 Wearable Platform)

- (Snapdragon X55 5G Modem-RF System)

- (Snapdragon XR2 5G Platform)

- (Snapdragon Auto 4G Modem)

- (Snapdragon X50 5G Modem-RF System)

- (Snapdragon 8 Gen 1 Mobile Platform)

- (Snapdragon 888 5G Mobile Platform)

- (Snapdragon 888+ 5G Mobile Platform (SM8350-AC))

- (Snapdragon 765 5G Mobile Platform (SM7250-AA))

- (Snapdragon 765G 5G Mobile Platform (SM7250-AB))

- (Snapdragon 768G 5G Mobile Platform (SM7250-AC))

- (Snapdragon 4 Gen 1 Mobile Platform)

- (Snapdragon 460 Mobile Platform)

- (Snapdragon 480 5G Mobile Platform)

- (Snapdragon 480+ 5G Mobile Platform (SM4350-AC))

- (Snapdragon 662 Mobile Platform)

- (Snapdragon 665 Mobile Platform)

- (Snapdragon 670 Mobile Platform)

- (Snapdragon 675 Mobile Platform)

- (Snapdragon 678 Mobile Platform (SM6150-AC))

- (Snapdragon 680 4G Mobile Platform)

- (Snapdragon 685 4G Mobile Platform (SM6225-AD))

- (Snapdragon 690 5G Mobile Platform)

- (Snapdragon 695 5G Mobile Platform)

- (Snapdragon 720G Mobile Platform)

- (Snapdragon 730 Mobile Platform (SM7150-AA))

- (Snapdragon 730G Mobile Platform (SM7150-AB))

- (Snapdragon 732G Mobile Platform (SM7150-AC))

- (Snapdragon 750G 5G Mobile Platform)

- (Snapdragon 778G 5G Mobile Platform)

- (Snapdragon 778G+ 5G Mobile Platform (SM7325-AE))

- (Snapdragon 780G 5G Mobile Platform)

- (Snapdragon 782G Mobile Platform (SM7325-AF))

- (Snapdragon 7c Compute Platform (SC7180-AC))

- (Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) "Rennell Pro")

- (Snapdragon 8+ Gen 1 Mobile Platform)

- (Snapdragon 845 Mobile Platform)

- (Snapdragon 850 Mobile Compute Platform)

- (Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite")

- (Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite")

- (Snapdragon 8cx Compute Platform (SC8180X-AA, AB))

- (Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro")

- (Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro")

- (Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB))

- (Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB))

- (Snapdragon AR2 Gen 1 Platform)

- (Snapdragon X24 LTE Modem)

- (Snapdragon X65 5G Modem-RF System)

- (Snapdragon XR2+ Gen 1 Platform)

- (Qualcomm® Video Collaboration VC1 Platform)

- (Qualcomm® Video Collaboration VC3 Platform)

- (Snapdragon 8 Gen 2 Mobile Platform)

- (Snapdragon 8+ Gen 2 Mobile Platform)

- (Snapdragon Auto 5G Modem-RF)

- (Snapdragon X75 5G Modem-RF System)

- (Immersive Home 214 Platform)

- (Immersive Home 216 Platform)

- (Immersive Home 316 Platform)

- (Immersive Home 318 Platform)

- (SA4155P)

- (SA8770P)

- (Snapdragon X12 LTE Modem)

- (AR9380)

- (Qualcomm® Video Collaboration VC5 Platform)

- (Snapdragon 710 Mobile Platform)

- (Snapdragon 712 Mobile Platform)

- (Snapdragon 8 Gen 3 Mobile Platform)

- (Snapdragon Auto 5G Modem-RF Gen 2)

- (Snapdragon X35 5G Modem-RF System)

- (Snapdragon XR1 Platform)

- (SXR1120)

- (SA4150P)

- (SA8775P)

- (Snapdragon X20 LTE Modem)

- (Home Hub 100 Platform)

- (Snapdragon X5 LTE Modem)

- (SA7775P)

- (SA8620P)

- (SA8650P)

- (SM6370)

- (Snapdragon X62 5G Modem-RF System)

- (Snapdragon X72 5G Modem-RF System)

- (SRV1H)

- (SRV1L)

- (SRV1M)

- (SXR2250P)

- (SM4635)

- (SM8750)

- (SM8750P)

- (FastConnect 6700)

- (FastConnect 6900)

- (FastConnect 7800)

- (CSR8811)

- (SA6155P)

- (SA7255P)

- (SA8155P)

- (SA8195P)

- (SA8255P)

- (SA8295P)

- (SA9000P)

- (SDX55)

- (SM6650)

- (SM7635)

- (SM7675)

- (SM7675P)

- (SM8550P)

- (SM8635)

- (SM8635P)

- (SXR2230P)

- (SXR2330P)

- (Snapdragon AR1 Gen 1 Platform "Luna1")

- (Snapdragon AR1 Gen 1 Platform)

- (SM6650P)

- (SM8650Q)

- (SM8735)

- (Snapdragon X32 5G Modem-RF System)

- (SM7635P)

- (APQ8017)

- (FastConnect 6200)

- (FastConnect 6800)

- (Flight RB5 5G Platform)

- (Robotics RB2 Platform)

- (Robotics RB5 Platform)

- (SA6145P)

- (SA6150P)

- (SA6155)

- (SA8145P)

- (SA8150P)

- (SA8155)

- (SC8380XP)

- (SD865 5G)

- (SD888)

- (SDX61)

- (SG4150P)

- (SG8275P)

- (SM4125)

- (SM6250)

- (SM7250P)

- (SM7315)

- (SM7325P)

- (Smart Audio 400 Platform)

- (Snapdragon 4 Gen 2 Mobile Platform)

- (Snapdragon 7c+ Gen 3 Compute)

- (SSG2115P)

- (SSG2125P)

- (SW5100)

- (SW5100P)

- (SXR1230P)

- (SXR2130)

- (315 5G IoT Modem)

- (APQ8064AU)

- (CSRB31024)

- (Robotics RB3 Platform)

- (SC8180X+SDX55)

- (SD 8CX)

- (SD821)

- (SDX20M)

- (SM6250P)

- (Smart Audio 200 Platform)

- (Snapdragon 660 Mobile Platform)

- (Snapdragon 820 Automotive Platform)

- (Snapdragon 820 Mobile Platform)

- (Snapdragon 821 Mobile Platform)

- (Vision Intelligence 300 Platform)

- (Vision Intelligence 400 Platform)

Тип ПО

Микропрограммный код

Сетевое средство

Сетевое программное средство

Микропрограммный код аппаратных компонент компьютера

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 7,8)

Высокий уровень опасности (базовая оценка CVSS 3.1 составляет 7,5)

Возможные меры по устранению уязвимости

Использование рекомендаций производителя:

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html

Идентификаторы других систем описаний уязвимостей

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-21449
CVE

EPSS

Процентиль: 18%

0.00057

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Связанные уязвимости

CVE-2025-21449

CVSS3: 7.5

nvd

7 месяцев назад

Transient DOS may occur while processing malformed length field in SSID IEs.

GHSA-rg97-846q-ch76

CVSS3: 7.5

github

7 месяцев назад

Transient DOS may occur while processing malformed length field in SSID IEs.

EPSS

Процентиль: 18%

0.00057

Низкий

7.5 High

CVSS3

7.8 High

CVSS2