CVE-2025-21476: Qualcomm QCA6391 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

Affected products

• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCM5430 Firmware: affected versions not specified
• Qualcomm QCM6490 Firmware: affected versions not specified
• Qualcomm QCM8550 Firmware: affected versions not specified
• Qualcomm QCN9011 Firmware: affected versions not specified
• Qualcomm QCN9012 Firmware: affected versions not specified
• Qualcomm QCN9274 Firmware: affected versions not specified
• Qualcomm QCS5430 Firmware: affected versions not specified
• Qualcomm QCS615 Firmware: affected versions not specified
• Qualcomm QCS6490 Firmware: affected versions not specified
• Qualcomm QCS8550 Firmware: affected versions not specified
• Qualcomm QCS9100 Firmware: affected versions not specified
• Qualcomm SG8275 Firmware: affected versions not specified
• Qualcomm SG8275P Firmware: affected versions not specified
• Qualcomm SM6650 Firmware: affected versions not specified
• Qualcomm SM7635 Firmware: affected versions not specified
• Qualcomm SM7675 Firmware: affected versions not specified
• Qualcomm SM7675P Firmware: affected versions not specified
• Qualcomm SM8550 Firmware: affected versions not specified
• Qualcomm SM8550P Firmware: affected versions not specified
• Qualcomm SM8635 Firmware: affected versions not specified
• Qualcomm SM8635P Firmware: affected versions not specified
• Qualcomm SM8650 Firmware: affected versions not specified
• Qualcomm SM8650P Firmware: affected versions not specified
• and 17 more

Published 2025-09-24. Last modified 2026-06-17.