Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
History

Thu, 25 Sep 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 25 Sep 2025 08:30:00 +0000

Type Values Removed Values Added
First Time appeared Qualcomm
Qualcomm snapdragon
Vendors & Products Qualcomm
Qualcomm snapdragon

Wed, 24 Sep 2025 15:45:00 +0000

Type Values Removed Values Added
Description Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Title Buffer Over-read in Data Network Stack & Connectivity
Weaknesses CWE-126
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L'}


cve-icon MITRE

Status: PUBLISHED

Assigner: qualcomm

Published:

Updated: 2025-09-25T15:49:14.163Z

Reserved: 2024-12-18T09:50:08.935Z

Link: CVE-2025-21487

cve-icon Vulnrichment

Updated: 2025-09-24T16:41:43.648Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-24T16:15:34.310

Modified: 2025-09-24T18:11:24.520

Link: CVE-2025-21487

cve-icon Redhat

No data.