CVE-2025-21458: Qualcomm Fastconnect 6900 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.

Affected products

• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm QAM8255P Firmware: affected versions not specified
• Qualcomm QAM8650P Firmware: affected versions not specified
• Qualcomm QAM8775P Firmware: affected versions not specified
• Qualcomm QCA6174A Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCA6797AQ Firmware: affected versions not specified
• Qualcomm SA7255P Firmware: affected versions not specified
• Qualcomm SA7775P Firmware: affected versions not specified
• Qualcomm SA8255P Firmware: affected versions not specified
• Qualcomm SA8620P Firmware: affected versions not specified
• Qualcomm SA8650P Firmware: affected versions not specified
• Qualcomm SA8775P Firmware: affected versions not specified
• Qualcomm SA9000P Firmware: affected versions not specified
• Qualcomm Snapdragon 888+ 5g Mobile Platform (sm8350-Ac) Firmware: affected versions not specified
• Qualcomm Snapdragon 888 5g Mobile Platform Firmware: affected versions not specified
• Qualcomm SW5100 Firmware: affected versions not specified
• Qualcomm SW5100P Firmware: affected versions not specified
• Qualcomm WCD9380 Firmware: affected versions not specified
• Qualcomm WCD9385 Firmware: affected versions not specified
• Qualcomm WCN3980 Firmware: affected versions not specified
• Qualcomm WCN3988 Firmware: affected versions not specified
• Qualcomm WSA8830 Firmware: affected versions not specified
• Qualcomm WSA8835 Firmware: affected versions not specified

Published 2025-08-06. Last modified 2026-06-17.