HIGH · 8.2

CVE-2025-21484

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

Vulnerability Description

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

CVSS Score

8.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
QualcommSm8750 Firmware-
QualcommSm8750-
QualcommSm8750P Firmware-
QualcommSm8750P-
QualcommSm8850 Firmware-
QualcommSm8850-
QualcommSm8850P Firmware-
QualcommSm8850P-
QualcommSmart Audio 200 Platform Firmware-
QualcommSmart Audio 200 Platform-
QualcommSmart Display 200 Platform Firmware-
QualcommSmart Display 200 Platform-
QualcommSnapdragon 208 Processor Firmware-
QualcommSnapdragon 208 Processor-
QualcommSnapdragon 210 Processor Firmware-
QualcommSnapdragon 210 Processor-
QualcommSnapdragon 212 Mobile Platform Firmware-
QualcommSnapdragon 212 Mobile Platform-
QualcommSnapdragon 4 Gen 1 Mobile Platform Firmware-
QualcommSnapdragon 4 Gen 1 Mobile Platform-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2025-21484?

CVE-2025-21484 is a vulnerability with a CVSS score of 8.2 (HIGH). Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

How severe is CVE-2025-21484?

CVE-2025-21484 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-21484?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Sm8750 Firmware, Qualcomm Sm8750, Qualcomm Sm8750P Firmware, Qualcomm Sm8750P, Qualcomm Sm8850 Firmware.