Out-of-bounds Write in Camera_Linux_CVE-2025-21461

7.8 / 10

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Memory corruption when programming registers through virtual CDM.

Basic Information

ID CVE-2025-21461

Source qualcomm

Published Aug 6, 2025 at 07:25

Modified Aug 6, 2025 at 14:30

Affected Product

Vendor Qualcomm, Inc.

Product Snapdragon

Version FastConnect 6900

Affected Versions Qualcomm, Inc. Snapdragon FastConnect 6900
Qualcomm, Inc. Snapdragon FastConnect 7800
Qualcomm, Inc. Snapdragon SM6650
Qualcomm, Inc. Snapdragon SM7635
Qualcomm, Inc. Snapdragon SM7675
Qualcomm, Inc. Snapdragon SM7675P
Qualcomm, Inc. Snapdragon SM8635
Qualcomm, Inc. Snapdragon SM8635P
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 1 Mobile Platform
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 3 Mobile Platform
Qualcomm, Inc. Snapdragon WCD9370
Qualcomm, Inc. Snapdragon WCD9375
Qualcomm, Inc. Snapdragon WCD9378
Qualcomm, Inc. Snapdragon WCD9380
Qualcomm, Inc. Snapdragon WCD9390
Qualcomm, Inc. Snapdragon WCD9395
Qualcomm, Inc. Snapdragon WCN6650
Qualcomm, Inc. Snapdragon WCN6755
Qualcomm, Inc. Snapdragon WSA8830
Qualcomm, Inc. Snapdragon WSA8832
Qualcomm, Inc. Snapdragon WSA8835
Qualcomm, Inc. Snapdragon WSA8840
Qualcomm, Inc. Snapdragon WSA8845
Qualcomm, Inc. Snapdragon WSA8845H

CWE Classification

CWE-787

References

docs.qualcomm.com /product/publicresources/securitybulletin/august-2025-bulletin.html

{
    "lastseen": "",
    "description": "Memory corruption when programming registers through virtual CDM.",
    "published": "2025-08-06T07:25:52.424Z",
    "modified": "2025-08-06T14:30:47.477Z",
    "type": "cve",
    "title": "Out-of-bounds Write in Camera_Linux",
    "source": "qualcomm",
    "references": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html",
    "id": "CVE-2025-21461",
    "bulletinFamily": "",
    "cwe": [
        "CWE-787"
    ],
    "cvelist": null,
    "sourceData": "Qualcomm, Inc. Snapdragon FastConnect 6900\nQualcomm, Inc. Snapdragon FastConnect 7800\nQualcomm, Inc. Snapdragon SM6650\nQualcomm, Inc. Snapdragon SM7635\nQualcomm, Inc. Snapdragon SM7675\nQualcomm, Inc. Snapdragon SM7675P\nQualcomm, Inc. Snapdragon SM8635\nQualcomm, Inc. Snapdragon SM8635P\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 1 Mobile Platform\nQualcomm, Inc. Snapdragon Snapdragon 8 Gen 3 Mobile Platform\nQualcomm, Inc. Snapdragon WCD9370\nQualcomm, Inc. Snapdragon WCD9375\nQualcomm, Inc. Snapdragon WCD9378\nQualcomm, Inc. Snapdragon WCD9380\nQualcomm, Inc. Snapdragon WCD9390\nQualcomm, Inc. Snapdragon WCD9395\nQualcomm, Inc. Snapdragon WCN6650\nQualcomm, Inc. Snapdragon WCN6755\nQualcomm, Inc. Snapdragon WSA8830\nQualcomm, Inc. Snapdragon WSA8832\nQualcomm, Inc. Snapdragon WSA8835\nQualcomm, Inc. Snapdragon WSA8840\nQualcomm, Inc. Snapdragon WSA8845\nQualcomm, Inc. Snapdragon WSA8845H",
    "sourceHref": "",
    "cvss": {
        "score": 7.8,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Snapdragon",
    "version": "FastConnect 6900",
    "vendor": "Qualcomm, Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}