CVE-2025-21436
Estado: AnalizadaAlta (7.8)—
Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.11%
- Percentil entre todas las CVEs puntuadas: 1
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1068Exploitation for Privilege Escalationprivilege escalation90 % - Impacto principal
T1059Command and Scripting Interpreterexecution75 %
Corrupción de memoria (CWE-416) con acceso local y privilegios de usuario (AV:L/PR:L) permite escalada de privilegios; el impacto potencial es ejecución de código arbitrario.
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (25)
Qualcomm — Fastconnect 7800 FirmwareQualcomm — Qmp1000 FirmwareQualcomm — Sm8735 FirmwareQualcomm — Sm8750 FirmwareQualcomm — Sm8750p FirmwareQualcomm — Snapdragon 8 GEN 3 Mobile Platform FirmwareQualcomm — Snapdragon W5+ GEN 1 Wearable Platform FirmwareQualcomm — Sw5100 FirmwareQualcomm — Sw5100p FirmwareQualcomm — Sxr2330p FirmwareQualcomm — Wcd9378 FirmwareQualcomm — Wcd9380 FirmwareQualcomm — Wcd9390 FirmwareQualcomm — Wcd9395 FirmwareQualcomm — Wcn7750 FirmwareQualcomm — Wcn7860 FirmwareQualcomm — Wcn7861 FirmwareQualcomm — Wcn7880 FirmwareQualcomm — Wcn7881 FirmwareQualcomm — Wsa8830 FirmwareQualcomm — Wsa8832 FirmwareQualcomm — Wsa8835 FirmwareQualcomm — Wsa8840 FirmwareQualcomm — Wsa8845 FirmwareQualcomm — Wsa8845h Firmware
CWE
- CWE-416
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-21436",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-21436",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-04-08T03:56:05.391675Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "product-security@qualcomm.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "product-security@qualcomm.com",
"affectedData": [
{
"vendor": "Qualcomm, Inc.",
"product": "Snapdragon",
"versions": [
{
"status": "affected",
"version": "FastConnect 7800"
},
{
"status": "affected",
"version": "QMP1000"
},
{
"status": "affected",
"version": "SM8735"
},
{
"status": "affected",
"version": "SM8750"
},
{
"status": "affected",
"version": "SM8750P"
},
{
"status": "affected",
"version": "Snapdragon 8 Gen 3 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon W5+ Gen 1 Wearable Platform"
},
{
"status": "affected",
"version": "SW5100"
},
{
"status": "affected",
"version": "SW5100P"
},
{
"status": "affected",
"version": "SXR2330P"
},
{
"status": "affected",
"version": "WCD9378"
},
{
"status": "affected",
"version": "WCD9380"
},
{
"status": "affected",
"version": "WCD9390"
},
{
"status": "affected",
"version": "WCD9395"
},
{
"status": "affected",
"version": "WCN7750"
},
{
"status": "affected",
"version": "WCN7860"
},
{
"status": "affected",
"version": "WCN7861"
},
{
"status": "affected",
"version": "WCN7880"
},
{
"status": "affected",
"version": "WCN7881"
},
{
"status": "affected",
"version": "WSA8830"
},
{
"status": "affected",
"version": "WSA8832"
},
{
"status": "affected",
"version": "WSA8835"
},
{
"status": "affected",
"version": "WSA8840"
},
{
"status": "affected",
"version": "WSA8845"
},
{
"status": "affected",
"version": "WSA8845H"
}
],
"platforms": [
"Snapdragon Compute",
"Snapdragon Mobile",
"Snapdragon Wearables"
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2025-04-07T11:15:51.970",
"references": [
{
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html",
"tags": [
"Vendor Advisory"
],
"source": "product-security@qualcomm.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "product-security@qualcomm.com",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads."
},
{
"lang": "es",
"value": "Puede producirse una corrupción de memoria al iniciar dos llamadas IOCTL simultáneamente para crear procesos desde dos subprocesos diferentes."
}
],
"lastModified": "2026-06-17T08:43:24.787",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3053D68-C5D8-4D47-A4F0-9F3AF2289E1D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "638DBC7F-456F-487D-BED2-2214DFF8BEE2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qmp1000_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5298473D-8B34-42E6-BC32-69A3800972B4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qmp1000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2A1CF44E-FFC2-4DCB-8DC2-46422D912448"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sm8735_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "167C1CC1-03F8-49B3-B460-FCA38644DA06"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sm8735:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3D2E820B-1273-4E82-9D45-A4159AF3878C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sm8750_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84641A8E-A93C-48C1-86AC-193951BA4D78"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sm8750:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "74169A4C-0247-4719-887E-BBFB36B04F07"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sm8750p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D8ABDBF-BABC-4219-8A18-BDFC8C826B1F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sm8750p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "685D81D0-7E95-4DBA-A05B-7C708A5DFDF0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:snapdragon_8_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FAB6D60-1C03-4F85-B874-FF169402ED09"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:snapdragon_8_gen_3_mobile_platform:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C89A8D93-46DA-4547-A9F1-076FC0D5119D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:snapdragon_w5\\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C455E7D-D256-4240-BE72-2A93273D685A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:snapdragon_w5\\+_gen_1_wearable_platform:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "423E21A1-8F52-46DA-9AC2-77159FEB6001"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA1BF9BB-AF11-46A7-A71C-F7D289E76E3F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7B8455D6-287D-4934-8E4D-F4127A9C0449"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB599A9F-0305-4FE4-8623-0F86630FEDCB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EEB883BF-68B2-4C25-84DC-5DA953BFAA2F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sxr2330p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "568C5B08-AC42-48D3-8029-A65689EEBE75"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sxr2330p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "56DD2B49-0A36-443C-BECB-4115E271A415"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CFDBB5B-0A4F-4032-874F-D2A7EF933FB0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcd9378:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D28A12D6-CC60-4BE9-ADEE-FAB58B05440F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70292B01-617F-44AD-AF77-1AFC1450523D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FA94C6D6-85DB-4031-AAF4-C399019AE16D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "896F1C04-9957-440F-BF01-C3772CC3B3DF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcd9390:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A90555EB-47A7-4717-92D5-35B561825F06"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "699056F6-1517-4F25-AE07-4FFCF6923B9F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E4C023D2-6FF5-4FFC-B9F2-895979166580"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn7750_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0B2800F-B0A7-489E-BD70-B2EAAF45DE7A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn7750:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1AEA0D7B-F3F7-4A6F-B222-192412FEECD3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EB8794F-7998-424E-AF68-E4A4F9310F65"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "799D69CE-3FCC-4B19-8B00-9AF38111D983"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57608D47-894C-4895-B4B3-4733D55D57DB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2FFD2C38-1A61-4BED-ABFA-DAE0C4B78620"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63735D33-9F09-4841-9FE0-0D9AB604BECF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E826F765-4C2E-4319-BBC4-DEB02AAD783F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D765C392-5F38-4E6A-9E88-59629E7A6911"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FAE8F4F9-F692-4EC0-A3FE-2CDD681DCBFD"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11B69595-E488-4590-A150-CE5BE08B5E13"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7ACAD26E-B79E-4659-91A5-D301281F7D36"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F0E46DA6-9494-4D92-A4AE-A272AF6ACCCC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F80BC68E-7476-4A40-9F48-53722FE9A5BF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6B36F4B2-BAA3-45AD-9967-0EB482C99708"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA33DE15-C177-43B3-AD50-FF797753D12E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AE1A5841-5BCB-4033-ACB9-23F3FCA65309"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B47BF35-3AA0-4667-842E-19B0FE30BF3C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8A071672-9405-4418-9141-35CEADBB65AF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB7CF473-8B25-4851-91F2-1BD693CCDC85"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "91E591F2-8F72-4A5A-9264-2742EB2DABDA"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "product-security@qualcomm.com"
}