CVE-2025-21487

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Scoring

Severity

HIGH

CVSS base score

8.2

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

EPSS probability

0.26%

CWE

CWE-126

Published

2025-09-24

Last modified

2026-03-12

Affected products

• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon
• Qualcomm, Inc. Snapdragon

Weakness type

• CWE-126

Related vulnerabilities

• CVE-2026-83949 — Microsoft Office Word Information Disclosure Vulnerability
• CVE-2026-83951 — Microsoft Office Word Information Disclosure Vulnerability
• CVE-2026-81399 — Microsoft Excel Information Disclosure Vulnerability
• CVE-2026-78516 — Windows Storage Information Disclosure Vulnerability
• CVE-2026-72974 — Microsoft Office Excel Information Disclosure Vulnerability
• CVE-2026-69626 — Microsoft Office Information Disclosure Vulnerability
• CVE-2026-72932 — Windows Message Queuing Queue Manager Information Disclosure Vulnerability
• CVE-2026-69794 — Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Markdown version · Browse all CVEs