HIGH · 8.2

CVE-2025-21487

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Vulnerability Description

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

CVSS Score

8.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
QualcommApq8017 Firmware-
QualcommApq8017-
QualcommApq8064Au Firmware-
QualcommApq8064Au-
QualcommAqt1000 Firmware-
QualcommAqt1000-
QualcommFastconnect 6200 Firmware-
QualcommFastconnect 6200-
QualcommFastconnect 6700 Firmware-
QualcommFastconnect 6700-
QualcommSnapdragon 460 Mobile Platform Firmware-
QualcommSnapdragon 460 Mobile Platform-
QualcommSnapdragon 480 5G Mobile Platform Firmware-
QualcommSnapdragon 480 5G Mobile Platform-
QualcommSnapdragon 480\+ 5G Mobile Platform \(Sm4350-Ac\) Firmware-
QualcommSnapdragon 480\+ 5G Mobile Platform \(Sm4350-Ac\)-
QualcommSnapdragon 625 Mobile Platform Firmware-
QualcommSnapdragon 625 Mobile Platform-
QualcommSnapdragon 626 Mobile Platform Firmware-
QualcommSnapdragon 626 Mobile Platform-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2025-21487?

CVE-2025-21487 is a vulnerability with a CVSS score of 8.2 (HIGH). Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

How severe is CVE-2025-21487?

CVE-2025-21487 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-21487?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Apq8017 Firmware, Qualcomm Apq8017, Qualcomm Apq8064Au Firmware, Qualcomm Apq8064Au, Qualcomm Aqt1000 Firmware.