CVE-2025-21442
HIGHDescription
Memory corruption while transmitting packet mapping information with invalid header payload size.
Is your site exposed to CVE-2025-21442?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | qam8255p_firmware |
| qualcomm | qam8255p |
| qualcomm | qam8295p_firmware |
| qualcomm | qam8295p |
| qualcomm | qam8620p_firmware |
| qualcomm | qam8620p |
| qualcomm | qam8650p_firmware |
| qualcomm | qam8650p |
| qualcomm | qam8775p_firmware |
| qualcomm | qam8775p |
| qualcomm | qamsrv1h_firmware |
| qualcomm | qamsrv1h |
| qualcomm | qamsrv1m_firmware |
| qualcomm | qamsrv1m |
| qualcomm | qca6574au_firmware |
| qualcomm | qca6574au |
| qualcomm | qca6595_firmware |
| qualcomm | qca6595 |
| qualcomm | qca6595au_firmware |
| qualcomm | qca6595au |
| qualcomm | qca6688aq_firmware |
| qualcomm | qca6688aq |
| qualcomm | qca6696_firmware |
| qualcomm | qca6696 |
| qualcomm | qca6698aq_firmware |
| qualcomm | qca6698aq |
| qualcomm | sa7255p_firmware |
| qualcomm | sa7255p |
| qualcomm | sa7775p_firmware |
| qualcomm | sa7775p |
| qualcomm | sa8255p_firmware |
| qualcomm | sa8255p |
| qualcomm | sa8295p_firmware |
| qualcomm | sa8295p |
| qualcomm | sa8540p_firmware |
| qualcomm | sa8540p |
| qualcomm | sa8620p_firmware |
| qualcomm | sa8620p |
| qualcomm | sa8650p_firmware |
| qualcomm | sa8650p |
| qualcomm | sa8770p_firmware |
| qualcomm | sa8770p |
| qualcomm | sa8775p_firmware |
| qualcomm | sa8775p |
| qualcomm | sa9000p_firmware |
| qualcomm | sa9000p |
| qualcomm | srv1h_firmware |
| qualcomm | srv1h |
| qualcomm | srv1l_firmware |
| qualcomm | srv1l |
| qualcomm | srv1m_firmware |
| qualcomm | srv1m |
References
Frequently Asked Questions
What is CVE-2025-21442? +
How severe is CVE-2025-21442? +
What products are affected by CVE-2025-21442? +
How do I check if I'm vulnerable to CVE-2025-21442? +
Related Vulnerabilities
A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-byte private header to that …
The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph` and `gx_page_header_last_glyph` are …
Integer overflow to buffer overflow for some Intel(R) oneAPI Deep Neural Network Library (oneDNN) software before version v2026.0.0 within Ring …
llama.cpp is an inference of several LLM models in C/C++. Integer Overflow in the gguf_init_from_file_impl function in ggml/src/gguf.cpp can lead …
An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code …
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support …
