NetSight
high7.8

CVE-2025-21486

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

Impact

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

Affected products

VendorProductAffected versions
QualcommFastconnect 6900 Firmware
All versions
QualcommFastconnect 7800 Firmware
All versions
QualcommQmp1000 Firmware
All versions
QualcommSm8735 Firmware
All versions
QualcommSm8750 Firmware
All versions
QualcommSm8750p Firmware
All versions
QualcommSnapdragon W5\+ Gen 1 Wearable Platform Firmware
All versions
QualcommSw5100 Firmware
All versions
QualcommSw5100p Firmware
All versions
QualcommSxr2230p Firmware
All versions
QualcommSxr2250p Firmware
All versions
QualcommSxr2330p Firmware
All versions

Weakness classification

References