CVE-2025-21477: Qualcomm 315 5g IoT Modem Firmware

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Transient DOS while processing CCCH data when NW sends data with invalid length.

Affected products

• Qualcomm 315 5g IoT Modem Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6574A Firmware: affected versions not specified
• Qualcomm QCA6584AU Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCA8081 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm QCC710 Firmware: affected versions not specified
• Qualcomm QCM5430 Firmware: affected versions not specified
• Qualcomm QCM6490 Firmware: affected versions not specified
• Qualcomm QCN6024 Firmware: affected versions not specified
• Qualcomm QCN6224 Firmware: affected versions not specified
• Qualcomm QCN6274 Firmware: affected versions not specified
• Qualcomm QCN9024 Firmware: affected versions not specified
• Qualcomm QCS5430 Firmware: affected versions not specified
• Qualcomm QCS6490 Firmware: affected versions not specified
• Qualcomm QCS8550 Firmware: affected versions not specified
• and 64 more

Published 2025-08-06. Last modified 2026-06-17.