CVE-2025-21448
Vulnérabilité élevée dans Snapdragon (Qualcomm, Inc.)
CVSS 7.5 · Élevée
EPSS 0.3%
Qualcomm, Inc.•Snapdragon•Versions : QCN5124, IPQ8065, SSG2125P, QAM8650P, QCA8337, IPQ9570, QAMSRV1M, QCA6431, Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro", QCA1064, QCN9100, SDX61, SC8180X+SDX55, Snapdragon 865+ 5G Mobile Platform (SM8250-AB), WSA8832, WSA8835, QCA6574A, QCC2076, QCN9000, IPQ8076, QCA6678AQ, WCD9390, SM7315, QCN5054, QCA6420, QCN9074, Qualcomm Video Collaboration VC3 Platform, SM8635, WCN7861, QCN6132, QCS7230, SA6155P, WCD9370, SD888, WCD9385, QCN5052, WSA8845, SM8735, QCA8072, QCA6696, QCN6274, WSA8845H, QCN6100, IPQ8071A, QAMSRV1H, QFW7124, Snapdragon 778G+ 5G Mobile Platform (SM7325-AE), SA8150P, Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite", SA6150P, QCS8550, QCS9100, QCA6574AU, QCA9984, QCN9011, SG8275P, Snapdragon 865 5G Mobile Platform, QAM8620P, WCN6650, SA8770P, Snapdragon Auto 5G Modem-RF, QCA9889, IPQ6018, QCC710, QCN9012, QAM8295P, WCN7881, Snapdragon Auto 5G Modem-RF Gen 2, QCA2066, QCN5154, Snapdragon AR1 Gen 1 Platform, QCA6564AU, QCN9002, QCS6490, Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite", Immersive Home 316 Platform, WCD9380, QCA9994, Snapdragon X62 5G Modem-RF System, SA6155, QCM4490, WSA8830, IPQ6028, QSM8250, WCN7880, FastConnect 7800, QEP8111, QCN9022, Snapdragon 8cx Compute Platform (SC8180X-AA, AB), QCN5152, QSM8350, QCA6698AQ, QCN6112, QCA9980, QCS8250, QCN6224, QCA4024, IPQ5010, SA8650P, SA7775P, Snapdragon 7c+ Gen 3 Compute, Snapdragon 8+ Gen 1 Mobile Platform, SSG2115P, WSA8815, QCA6595AU, QFW7114, Snapdragon XR2+ Gen 1 Platform, QCM6490, QRB5165N, SC8380XP, SA8155, QCA6797AQ, QCM8550, QCA6777AQ, IPQ8074A, QCN5021, QAM8255P, QCA6421, IPQ8070, QCA9985, SA4150P, QCN9001, QCN9024, IPQ8078, SM8635P, Snapdragon 8+ Gen 2 Mobile Platform, QCN5164, QCA9990, SM7325P, SM8750, Immersive Home 214 Platform, Snapdragon Auto 4G Modem, QCA6584AU, Snapdragon 888+ 5G Mobile Platform (SM8350-AC), Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro", Snapdragon X65 5G Modem-RF System, WCD9341, WCD9395, Snapdragon 870 5G Mobile Platform (SM8250-AC), AR9380, WCN7750, QCN5022, QCN9274, QCM5430, SA7255P, IPQ8064, IPQ8173, SM7675, QCS5430, WCN3950, SA8145P, WCD9340, QRB5165M, Snapdragon X55 5G Modem-RF System, QCA2064, WCD9375, Snapdragon AR1 Gen 1 Platform "Luna1", SM6650, Flight RB5 5G Platform, SD 8 Gen1 5G, SXR2330P, Snapdragon 8 Gen 1 Mobile Platform, SA8195P, QCA1062, SM8650Q, FastConnect 6200, QCA6787AQ, Snapdragon AR2 Gen 1 Platform, SXR2230P, IPQ8076A, IPQ5028, QCN9072, QCA6430, SA8620P, SD865 5G, QCA6174A, QCN6023, IPQ9554, Immersive Home 318 Platform, Snapdragon 8 Gen 3 Mobile Platform, QCA9888, IPQ8174, QCA6554A, PMP8074, QCS8300, FastConnect 6900, QCA6574, QCN6122, IPQ9574, 315 5G IoT Modem, SM7675P, AR8035, QCA6436, QCA8075, SRV1H, IPQ8072A, QAM8775P, Snapdragon 8 Gen 2 Mobile Platform, QCN5122, SRV1L, QCN9070, SA9000P, SA6145P, QCN6102, QCA6595, QCN6024, QCA2065, Robotics RB5 Platform, IPQ8068, IPQ6010, Snapdragon X72 5G Modem-RF System, QCA0000, WCN6740, FastConnect 6800, Qualcomm Video Collaboration VC5 Platform, Immersive Home 216 Platform, IPQ8078A, IPQ8070A, QCA6688AQ, SXR2250P, Snapdragon 780G 5G Mobile Platform, Snapdragon 782G Mobile Platform (SM7325-AF), SA8255P, Snapdragon 888 5G Mobile Platform, SXR2130, QCN5024, WSA8810, WSA8840, QCA9886, SM8750P, SM8550P, AQT1000, QCN9003, Snapdragon XR2 5G Platform, Snapdragon X35 5G Modem-RF System, Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB), CSR8811, SDX55, SA8295P, QCA2062, WCD9360, SXR1230P, Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB), WCN6450, QMP1000, SM7635, WCN7860, FastConnect 6700, SA8775P, CSRB31024, QCA9986, QCA9992, QCA8081, SA8155P, Snapdragon 778G 5G Mobile Platform, WCN3980, QCS4490, QCC2073, SRV1M, QCA6426, QCA6391, Snapdragon X75 5G Modem-RF System, WCD9378, WCN6755
Description
Transient DOS may occur while parsing SSID in action frames.
Gravité et risque d'exploitation
CVE-2025-21448 obtient un score CVSS de 7.5/10, soit une gravité élevée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.26 %, ce qui la place devant 16.9 % des CVE référencées.
Que faire ?
- Vérifiez si Snapdragon (versions QCN5124, IPQ8065, SSG2125P, QAM8650P, QCA8337, IPQ9570, QAMSRV1M, QCA6431, Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro", QCA1064, QCN9100, SDX61, SC8180X+SDX55, Snapdragon 865+ 5G Mobile Platform (SM8250-AB), WSA8832, WSA8835, QCA6574A, QCC2076, QCN9000, IPQ8076, QCA6678AQ, WCD9390, SM7315, QCN5054, QCA6420, QCN9074, Qualcomm Video Collaboration VC3 Platform, SM8635, WCN7861, QCN6132, QCS7230, SA6155P, WCD9370, SD888, WCD9385, QCN5052, WSA8845, SM8735, QCA8072, QCA6696, QCN6274, WSA8845H, QCN6100, IPQ8071A, QAMSRV1H, QFW7124, Snapdragon 778G+ 5G Mobile Platform (SM7325-AE), SA8150P, Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite", SA6150P, QCS8550, QCS9100, QCA6574AU, QCA9984, QCN9011, SG8275P, Snapdragon 865 5G Mobile Platform, QAM8620P, WCN6650, SA8770P, Snapdragon Auto 5G Modem-RF, QCA9889, IPQ6018, QCC710, QCN9012, QAM8295P, WCN7881, Snapdragon Auto 5G Modem-RF Gen 2, QCA2066, QCN5154, Snapdragon AR1 Gen 1 Platform, QCA6564AU, QCN9002, QCS6490, Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite", Immersive Home 316 Platform, WCD9380, QCA9994, Snapdragon X62 5G Modem-RF System, SA6155, QCM4490, WSA8830, IPQ6028, QSM8250, WCN7880, FastConnect 7800, QEP8111, QCN9022, Snapdragon 8cx Compute Platform (SC8180X-AA, AB), QCN5152, QSM8350, QCA6698AQ, QCN6112, QCA9980, QCS8250, QCN6224, QCA4024, IPQ5010, SA8650P, SA7775P, Snapdragon 7c+ Gen 3 Compute, Snapdragon 8+ Gen 1 Mobile Platform, SSG2115P, WSA8815, QCA6595AU, QFW7114, Snapdragon XR2+ Gen 1 Platform, QCM6490, QRB5165N, SC8380XP, SA8155, QCA6797AQ, QCM8550, QCA6777AQ, IPQ8074A, QCN5021, QAM8255P, QCA6421, IPQ8070, QCA9985, SA4150P, QCN9001, QCN9024, IPQ8078, SM8635P, Snapdragon 8+ Gen 2 Mobile Platform, QCN5164, QCA9990, SM7325P, SM8750, Immersive Home 214 Platform, Snapdragon Auto 4G Modem, QCA6584AU, Snapdragon 888+ 5G Mobile Platform (SM8350-AC), Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro", Snapdragon X65 5G Modem-RF System, WCD9341, WCD9395, Snapdragon 870 5G Mobile Platform (SM8250-AC), AR9380, WCN7750, QCN5022, QCN9274, QCM5430, SA7255P, IPQ8064, IPQ8173, SM7675, QCS5430, WCN3950, SA8145P, WCD9340, QRB5165M, Snapdragon X55 5G Modem-RF System, QCA2064, WCD9375, Snapdragon AR1 Gen 1 Platform "Luna1", SM6650, Flight RB5 5G Platform, SD 8 Gen1 5G, SXR2330P, Snapdragon 8 Gen 1 Mobile Platform, SA8195P, QCA1062, SM8650Q, FastConnect 6200, QCA6787AQ, Snapdragon AR2 Gen 1 Platform, SXR2230P, IPQ8076A, IPQ5028, QCN9072, QCA6430, SA8620P, SD865 5G, QCA6174A, QCN6023, IPQ9554, Immersive Home 318 Platform, Snapdragon 8 Gen 3 Mobile Platform, QCA9888, IPQ8174, QCA6554A, PMP8074, QCS8300, FastConnect 6900, QCA6574, QCN6122, IPQ9574, 315 5G IoT Modem, SM7675P, AR8035, QCA6436, QCA8075, SRV1H, IPQ8072A, QAM8775P, Snapdragon 8 Gen 2 Mobile Platform, QCN5122, SRV1L, QCN9070, SA9000P, SA6145P, QCN6102, QCA6595, QCN6024, QCA2065, Robotics RB5 Platform, IPQ8068, IPQ6010, Snapdragon X72 5G Modem-RF System, QCA0000, WCN6740, FastConnect 6800, Qualcomm Video Collaboration VC5 Platform, Immersive Home 216 Platform, IPQ8078A, IPQ8070A, QCA6688AQ, SXR2250P, Snapdragon 780G 5G Mobile Platform, Snapdragon 782G Mobile Platform (SM7325-AF), SA8255P, Snapdragon 888 5G Mobile Platform, SXR2130, QCN5024, WSA8810, WSA8840, QCA9886, SM8750P, SM8550P, AQT1000, QCN9003, Snapdragon XR2 5G Platform, Snapdragon X35 5G Modem-RF System, Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB), CSR8811, SDX55, SA8295P, QCA2062, WCD9360, SXR1230P, Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB), WCN6450, QMP1000, SM7635, WCN7860, FastConnect 6700, SA8775P, CSRB31024, QCA9986, QCA9992, QCA8081, SA8155P, Snapdragon 778G 5G Mobile Platform, WCN3980, QCS4490, QCC2073, SRV1M, QCA6426, QCA6391, Snapdragon X75 5G Modem-RF System, WCD9378, WCN6755) est présent sur votre parc.
- Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
- À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
- Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.