CVE-2023-21625: Qualcomm APQ8009 Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

Affected products

• Qualcomm APQ8009 Firmware: affected versions not specified
• Qualcomm APQ8017 Firmware: affected versions not specified
• Qualcomm APQ8037 Firmware: affected versions not specified
• Qualcomm AR8031 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm MDM9205 Firmware: affected versions not specified
• Qualcomm MDM9250 Firmware: affected versions not specified
• Qualcomm MDM9650 Firmware: affected versions not specified
• Qualcomm MSM8108 Firmware: affected versions not specified
• Qualcomm MSM8208 Firmware: affected versions not specified
• Qualcomm MSM8209 Firmware: affected versions not specified
• Qualcomm MSM8608 Firmware: affected versions not specified
• Qualcomm MSM8917 Firmware: affected versions not specified
• Qualcomm MSM8937 Firmware: affected versions not specified
• Qualcomm QCA4004 Firmware: affected versions not specified
• Qualcomm QCA4010 Firmware: affected versions not specified
• Qualcomm QCA4020 Firmware: affected versions not specified
• Qualcomm QCA4024 Firmware: affected versions not specified
• Qualcomm QCA6174A Firmware: affected versions not specified
• Qualcomm QCA6564A Firmware: affected versions not specified
• Qualcomm QCA6564AU Firmware: affected versions not specified
• Qualcomm QCA6574A Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA9377 Firmware: affected versions not specified
• and 21 more

Published 2023-08-08. Last modified 2026-06-17.