CVE-2025-21486: Qualcomm Fastconnect 6900 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

Affected products

• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm QMP1000 Firmware: affected versions not specified
• Qualcomm SM8735 Firmware: affected versions not specified
• Qualcomm SM8750 Firmware: affected versions not specified
• Qualcomm SM8750P Firmware: affected versions not specified
• Qualcomm Snapdragon w5+ Gen 1 Wearable Platform Firmware: affected versions not specified
• Qualcomm SW5100 Firmware: affected versions not specified
• Qualcomm SW5100P Firmware: affected versions not specified
• Qualcomm SXR2230P Firmware: affected versions not specified
• Qualcomm SXR2250P Firmware: affected versions not specified
• Qualcomm SXR2330P Firmware: affected versions not specified
• Qualcomm WCD9378 Firmware: affected versions not specified
• Qualcomm WCD9380 Firmware: affected versions not specified
• Qualcomm WCD9385 Firmware: affected versions not specified
• Qualcomm WCD9395 Firmware: affected versions not specified
• Qualcomm WCN3660B Firmware: affected versions not specified
• Qualcomm WCN3680B Firmware: affected versions not specified
• Qualcomm WCN3980 Firmware: affected versions not specified
• Qualcomm WCN3988 Firmware: affected versions not specified
• Qualcomm WCN7750 Firmware: affected versions not specified
• Qualcomm WCN7860 Firmware: affected versions not specified
• Qualcomm WCN7861 Firmware: affected versions not specified
• Qualcomm WCN7880 Firmware: affected versions not specified
• Qualcomm WCN7881 Firmware: affected versions not specified
• and 6 more

Published 2025-06-03. Last modified 2026-06-17.