CVE-2025-21487: Qualcomm 205 Mobile Platform Firmware

High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Affected products

• Qualcomm 205 Mobile Platform Firmware: affected versions not specified
• Qualcomm 215 Mobile Platform Firmware: affected versions not specified
• Qualcomm APQ8017 Firmware: affected versions not specified
• Qualcomm APQ8064AU Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm MSM8996AU Firmware: affected versions not specified
• Qualcomm QAM8255P Firmware: affected versions not specified
• Qualcomm QAM8295P Firmware: affected versions not specified
• Qualcomm QAM8620P Firmware: affected versions not specified
• Qualcomm QAM8650P Firmware: affected versions not specified
• Qualcomm QAM8775P Firmware: affected versions not specified
• Qualcomm QAMSRV1H Firmware: affected versions not specified
• Qualcomm QAMSRV1M Firmware: affected versions not specified
• Qualcomm QCA6310 Firmware: affected versions not specified
• Qualcomm QCA6320 Firmware: affected versions not specified
• Qualcomm QCA6335 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6420 Firmware: affected versions not specified
• Qualcomm QCA6426 Firmware: affected versions not specified
• Qualcomm QCA6430 Firmware: affected versions not specified
• and 202 more

Published 2025-09-24. Last modified 2026-09-26.