עברית

Vulnerability Intelligence

CVE-2025-21488

High 8.2

Published
Last modified
NVD status
Analyzed

Description

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

Affected products

qualcomm: fastconnect 6200 firmware; qualcomm: fastconnect 6200; qualcomm: fastconnect 6700 firmware; qualcomm: fastconnect 6700; qualcomm: fastconnect 6900 firmware; qualcomm: fastconnect 6900; qualcomm: fastconnect 7800 firmware; qualcomm: fastconnect 7800; qualcomm: msm8996au firmware; qualcomm: msm8996au; qualcomm: qca6564 firmware; qualcomm: qca6564; qualcomm: qca6564a firmware; qualcomm: qca6564a; qualcomm: qca6564au firmware

References1

Metrics

CVSS 3.1
8.2 HIGH Score source: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
EPSS — exploit probability
0% percentile: 20 · as of 8 November 2026
CWE
CWE-126

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.