CVE-2025-21457: Qualcomm AR8035 Firmware

Medium severity, CVSS 6.1. EPSS: 0.1% chance of exploitation in the next 30 days.

Information disclosure while opening a fastrpc session when domain is not sanitized.

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm QCA6584AU Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCA8081 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm QCC710 Firmware: affected versions not specified
• Qualcomm QCN6224 Firmware: affected versions not specified
• Qualcomm QCN6274 Firmware: affected versions not specified
• Qualcomm QFW7114 Firmware: affected versions not specified
• Qualcomm QFW7124 Firmware: affected versions not specified
• Qualcomm Snapdragon Auto 5g Modem-Rf Gen 2 Firmware: affected versions not specified
• Qualcomm Snapdragon x72 5g Modem-Rf System Firmware: affected versions not specified
• Qualcomm Snapdragon x75 5g Modem-Rf System Firmware: affected versions not specified
• Qualcomm WCD9340 Firmware: affected versions not specified

Published 2025-08-06. Last modified 2026-06-17.