CVE-2025-21458

🗓️ 06 Aug 2025 07:25:51Reported by qualcommType

Memory corruption in NPU due to Use After Free vulnerability through simultaneous IOCTL calls.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2025-21458	6 Aug 202507:25	–	attackerkb
Circl	CVE-2025-21458	6 Aug 202507:52	–	circl
CNNVD	Qualcomm Chipsets 资源管理错误漏洞	6 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-21458 Use After Free in NPU	6 Aug 202507:25	–	cvelist
EUVD	EUVD-2025-23806	3 Oct 202520:07	–	euvd
NVD	CVE-2025-21458	6 Aug 202508:15	–	nvd
Positive Technologies	PT-2025-32123 · Ioctl · Ioctl	6 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-21458	8 Aug 202507:31	–	redhatcve
Vulnrichment	CVE-2025-21458 Use After Free in NPU	6 Aug 202507:25	–	vulnrichment

NVD

Node

qualcomm fastconnect_6900_firmwareMatch-

AND

qualcomm fastconnect_6900Match-

Node

qualcomm qam8255p_firmwareMatch-

AND

qualcomm qam8255pMatch-

Node

qualcomm qam8650p_firmwareMatch-

AND

qualcomm qam8650pMatch-

Node

qualcomm qam8775p_firmwareMatch-

AND

qualcomm qam8775pMatch-

Node

qualcomm qca6174a_firmwareMatch-

AND

qualcomm qca6174aMatch-

Node

qualcomm qca6698aq_firmwareMatch-

AND

qualcomm qca6698aqMatch-

Node

qualcomm qca6797aq_firmwareMatch-

AND

qualcomm qca6797aqMatch-

Node

qualcomm sa7255p_firmwareMatch-

AND

qualcomm sa7255pMatch-

Node

qualcomm sa7775p_firmwareMatch-

AND

qualcomm sa7775pMatch-

Node

qualcomm sa8255p_firmwareMatch-

AND

qualcomm sa8255pMatch-

Node

qualcomm sa8620p_firmwareMatch-

AND

qualcomm sa8620pMatch-

Node

qualcomm sa8650p_firmwareMatch-

AND

qualcomm sa8650pMatch-

Node

qualcomm sa8775p_firmwareMatch-

AND

qualcomm sa8775pMatch-

Node

qualcomm sa9000p_firmwareMatch-

AND

qualcomm sa9000pMatch-

Node

qualcomm snapdragon_888_5g_mobile_platform_firmwareMatch-

AND

qualcomm snapdragon_888_5g_mobile_platformMatch-

Node

qualcomm snapdragon_888+_5g_mobile_platform_(sm8350-ac)_firmwareMatch-

AND

qualcomm snapdragon_888+_5g_mobile_platform_(sm8350-ac)Match-

Node

qualcomm sw5100_firmwareMatch-

AND

qualcomm sw5100Match-

Node

qualcomm sw5100p_firmwareMatch-

AND

qualcomm sw5100pMatch-

Node

qualcomm wcd9380_firmwareMatch-

AND

qualcomm wcd9380Match-

Node

qualcomm wcd9385_firmwareMatch-

AND

qualcomm wcd9385Match-

Node

qualcomm wcn3980_firmwareMatch-

AND

qualcomm wcn3980Match-

Node

qualcomm wcn3988_firmwareMatch-

AND

qualcomm wcn3988Match-

Node

qualcomm wsa8830_firmwareMatch-

AND

qualcomm wsa8830Match-

Node

qualcomm wsa8835_firmwareMatch-

AND

qualcomm wsa8835Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Connectivity",
      "Snapdragon Mobile",
      "Snapdragon Wearables"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FastConnect 6900"
      },
      {
        "status": "affected",
        "version": "QAM8255P"
      },
      {
        "status": "affected",
        "version": "QAM8650P"
      },
      {
        "status": "affected",
        "version": "QAM8775P"
      },
      {
        "status": "affected",
        "version": "QCA6174A"
      },
      {
        "status": "affected",
        "version": "QCA6698AQ"
      },
      {
        "status": "affected",
        "version": "QCA6797AQ"
      },
      {
        "status": "affected",
        "version": "SA7255P"
      },
      {
        "status": "affected",
        "version": "SA7775P"
      },
      {
        "status": "affected",
        "version": "SA8255P"
      },
      {
        "status": "affected",
        "version": "SA8620P"
      },
      {
        "status": "affected",
        "version": "SA8650P"
      },
      {
        "status": "affected",
        "version": "SA8775P"
      },
      {
        "status": "affected",
        "version": "SA9000P"
      },
      {
        "status": "affected",
        "version": "Snapdragon 888 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)"
      },
      {
        "status": "affected",
        "version": "SW5100"
      },
      {
        "status": "affected",
        "version": "SW5100P"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WCN3980"
      },
      {
        "status": "affected",
        "version": "WCN3988"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      }
    ]
  }
]

Source	Link
docs	www.docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html

19 Aug 2025 13:21Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.8

EPSS0.00068

SSVC

CWE-416

cve-2025-21458 memory corruption use after free npu ioctl interface