Cyber Resilience

CVE-2025-21427

Memory Safety in Qualcomm Sa4150P Firmware

Published
08 July 2025
Modified
17 June 2026
Patch / advisory
CVSS Score v3.1 8.2
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
EPSS Score 0.0020 10th percentile
Risk Priority 60 floored blend · peak EPSS

Summary

CVE-2025-21427 is a high-severity Buffer Over-read (CWE-126) vulnerability in Qualcomm Sa4150P Firmware. Its CVSS base score is 8.2 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique OS Credential Dumping (T1003); ranked at the 10th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to SA-11 (Developer Testing and Evaluation) and SA-8 (Security and Privacy Engineering Principles) — see the control section below for these in your framework.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2025-21427 is an information disclosure vulnerability that occurs while decoding RTP packet payloads when User Equipment (UE) receives RTP packets from the network. It is associated with CWE-126 (Buffer Over-read) and CWE-125 (Out-of-bounds Read), earning a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L). The vulnerability affects components in Qualcomm products, as detailed in their security advisories.

The vulnerability can be exploited by a remote attacker with network access who sends a specially crafted RTP packet to the targeted UE. No authentication or user interaction is required, and exploitation has low complexity. Successful exploitation results in high-impact confidentiality loss through information disclosure, along with low-impact availability disruption.

Mitigation guidance is provided in the Qualcomm July 2025 Security Bulletin, available at https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html. Security practitioners should consult this advisory for affected products, patch availability, and recommended remediation steps.

EU & UK References

Vulnerability Data

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise Techniques

T1003 OS Credential Dumping Credential Access
Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password.
T1005 Data from Local System Collection
Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior to Exfiltration.
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
T1210 Exploitation of Remote Services Lateral Movement
Adversaries may exploit remote services to gain unauthorized access to internal systems once inside of a network.
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2023-43555Same product: Qualcomm 215 Mobile
CVE-2024-49838Same product: Qualcomm Fastconnect 6200
CVE-2023-33115Same product: Qualcomm Aqt1000
CVE-2025-21449Same product: Qualcomm Apq8064Au
CVE-2024-33051Same product: Qualcomm Aqt1000
CVE-2025-21454Same product: Qualcomm Apq8064Au
CVE-2023-28542Same product: Qualcomm Apq8064Au
CVE-2023-43528Same product: Qualcomm Fastconnect 6800
CVE-2023-43533Same product: Qualcomm Aqt1000
CVE-2024-21465Same product: Qualcomm Aqt1000

Affected Assets

qualcomm
sm6250 firmware
all versions
qualcomm
sm6370 firmware
all versions
qualcomm
sm7315 firmware
all versions
qualcomm
sm7325p firmware
all versions
qualcomm
sm8550p firmware
all versions
qualcomm
smart display 200 platform firmware
all versions
qualcomm
snapdragon 210 firmware
all versions
qualcomm
snapdragon 212 mobile firmware
all versions
qualcomm
snapdragon 4 gen 1 mobile firmware
all versions
qualcomm
snapdragon 4 gen 2 mobile firmware
all versions
+169 more product configuration(s) — see NVD for full list

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

Developer testing and evaluation (static analysis, fuzzing, bounds checking tests) directly finds buffer over-read flaws.

Engineering principles such as memory-safe design and bounds-checked abstractions structurally stop introduction of out-of-bounds reads.

Process isolation limits the blast radius of an over-read to the compromised domain.

Input validation enforces length and index constraints that prevent many externally triggered over-reads.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure development practices directly prevent introduction of buffer over-read weaknesses.

ID.RA-01 partial match
prevents

Vulnerability identification processes can discover buffer over-read flaws via scanning or review.

PR.PS-02 partial match
prevents

Patching or replacing vulnerable software removes known instances of buffer over-read bugs.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

finds

Security testing in development can detect buffer over-reads before release.

A.8.15 Logging partial match
finds

Logging can record evidence of an out-of-bounds read but does not prevent the weakness itself.

prevents

Secure SDLC mandates input validation and bounds checking that can prevent buffer over-reads.

prevents

Application security requirements can specify buffer-size and bounds-checking rules.

prevents

Secure architecture principles include memory-safety and bounds-checking design choices.

prevents

Secure coding standards directly require bounds-checked buffer access, mitigating over-reads.

References