CVE-2025-21440
Out-of-bounds Read in Windows WLAN Host
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
| CWE | CWE-787 |
| Vendor | qualcomm, inc. |
| Product | snapdragon |
| Published | Apr 7, 2025 |
| Last Updated | Feb 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for qualcomm, inc. snapdragon
Be the first to know when new high vulnerabilities affecting qualcomm, inc. snapdragon are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Qualcomm, Inc. / Snapdragon
AQT1000 FastConnect 6200 FastConnect 6700 FastConnect 6800 FastConnect 6900 FastConnect 7800 QCA1062 QCA1064 QCA2062 QCA2064 QCA2065 QCA2066 QCA6391 QCA6420 QCA6430 QCC2073 QCC2076 QCM5430 QCM6490 QCS5430 QCS6490 Qualcomm Video Collaboration VC3 Platform SC8180X+SDX55 SC8380XP SM6250 Snapdragon 7c Compute Platform (SC7180-AC) Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) "Rennell Pro" Snapdragon 7c+ Gen 3 Compute Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite" Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite" Snapdragon 8cx Compute Platform (SC8180X-AA, AB) Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro" Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro" Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB) WCD9340 WCD9341 WCD9370 WCD9375 WCD9380 WCD9385 WSA8810 WSA8815 WSA8840 WSA8845 WSA8845H