ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2025-21474

Qualcomm Snapdragon

Use After Free in BTHOST

CVSS 3.1
7.8بالا

شرح رسمی (انگلیسی)

Memory corruption while processing commands from A2dp sink command queue.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.8بالا 3.1 CVEProject cvelistV5 (CNA) (qualcomm) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Qualcomm, Inc. Snapdragon FastConnect 6800 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6900 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 7800 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QAM8295P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6391 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6426 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6436 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6574AU CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6696 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCN9074 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCS410 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCS610 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC1 Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC3 Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA6145P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA6150P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA6155P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8145P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8150P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8155P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8195P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SA8295P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SD865 5G CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SW5100 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SW5100P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SXR2130 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 1 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 865 5G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 865+ 5G Mobile Platform (SM8250-AB) CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 870 5G Mobile Platform (SM8250-AC) CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon W5+ Gen 1 Wearable Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon X55 5G Modem-RF System CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon XR2 5G Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9341 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9370 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9380 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3660B CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3680B CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3950 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3980 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3988 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8810 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8815 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8830 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8835 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۴/۰۵/۱۵
آخرین به‌روزرسانی
۱۴۰۴/۰۵/۱۵
وضعیت
منتشرشده
صادرکننده (CNA)
qualcomm

پیش‌بینی بهره‌برداری (EPSS)

۰٫۱٪
احتمال بهره‌برداری در ۳۰ روز
۰٫۸٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-416
    Use After Free