{"id":"CVE-2025-21487","title":"Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.","summary":"Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.","severity":"high","cvss":8.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","cwe":["CWE-126"],"vendor":"qualcomm","product":"apq8017_firmware","affected":["apq8017_firmware","apq8064au_firmware","aqt1000_firmware","fastconnect_6200_firmware","fastconnect_6700_firmware","snapdragon_460_mobile_platform_firmware","snapdragon_480_5g_mobile_platform_firmware","snapdragon_480+_5g_mobile_platform_(sm4350-ac)_firmware","snapdragon_625_mobile_platform_firmware","snapdragon_626_mobile_platform_firmware","snapdragon_630_mobile_platform_firmware","snapdragon_632_mobile_platform_firmware","snapdragon_636_mobile_platform_firmware","snapdragon_660_mobile_platform_firmware","snapdragon_662_mobile_platform_firmware","snapdragon_670_mobile_platform_firmware","snapdragon_675_mobile_platform_firmware","snapdragon_678_mobile_platform_(sm6150-ac)_firmware","snapdragon_680_4g_mobile_platform_firmware","snapdragon_685_4g_mobile_platform_(sm6225-ad)_firmware","snapdragon_690_5g_mobile_platform_firmware","snapdragon_695_5g_mobile_platform_firmware","snapdragon_710_mobile_platform_firmware","snapdragon_720g_mobile_platform_firmware","snapdragon_730_mobile_platform_(sm7150-aa)_firmware","snapdragon_730g_mobile_platform_(sm7150-ab)_firmware","snapdragon_732g_mobile_platform_(sm7150-ac)_firmware","snapdragon_750g_5g_mobile_platform_firmware","snapdragon_765_5g_mobile_platform_(sm7250-aa)_firmware","snapdragon_765g_5g_mobile_platform_(sm7250-ab)_firmware","snapdragon_768g_5g_mobile_platform_(sm7250-ac)_firmware","snapdragon_778g_5g_mobile_platform_firmware","snapdragon_778g+_5g_mobile_platform_(sm7325-ae)_firmware","snapdragon_780g_5g_mobile_platform_firmware","snapdragon_782g_mobile_platform_(sm7325-af)_firmware","snapdragon_7c+_gen_3_compute_firmware","snapdragon_8_gen_1_mobile_platform_firmware","snapdragon_8_gen_2_mobile_platform_firmware","snapdragon_8_gen_3_mobile_platform_firmware","snapdragon_8+_gen_1_mobile_platform_firmware","snapdragon_8+_gen_2_mobile_platform_firmware","snapdragon_820_automotive_platform_firmware","snapdragon_835_mobile_pc_platform_firmware","snapdragon_845_mobile_platform_firmware","snapdragon_855_mobile_platform_firmware","fastconnect_6800_firmware","fastconnect_6900_firmware","fastconnect_7800_firmware","msm8996au_firmware","qam8255p_firmware","qam8295p_firmware","qam8620p_firmware","qam8650p_firmware","qam8775p_firmware","qamsrv1h_firmware","qamsrv1m_firmware","qca6310_firmware","qca6320_firmware","qca6335_firmware","qca6391_firmware","qca6420_firmware","qca6426_firmware","qca6430_firmware","qca6436_firmware","qca6564_firmware","qca6564a_firmware","qca6564au_firmware","qca6574_firmware","qca6574a_firmware","qca6574au_firmware","qca6595_firmware","qca6595au_firmware","qca6678aq_firmware","qca6688aq_firmware","qca6696_firmware","qca6698aq_firmware","qca6797aq_firmware","qcm2150_firmware","qcm2290_firmware","qcm4290_firmware","qcm4325_firmware","qcm4490_firmware","qcm5430_firmware","qcm6125_firmware","qcm6490_firmware","snapdragon_855+/860_mobile_platform_(sm8150-ac)_firmware","snapdragon_865_5g_mobile_platform_firmware","snapdragon_865+_5g_mobile_platform_(sm8250-ab)_firmware","snapdragon_870_5g_mobile_platform_(sm8250-ac)_firmware","snapdragon_888_5g_mobile_platform_firmware","snapdragon_888+_5g_mobile_platform_(sm8350-ac)_firmware","snapdragon_w5+_gen_1_wearable_platform_firmware","snapdragon_x50_5g_modem-rf_system_firmware","snapdragon_x55_5g_modem-rf_system_firmware","snapdragon_xr1_platform_firmware","snapdragon_xr2_5g_platform_firmware","snapdragon_xr2+_gen_1_platform_firmware","srv1h_firmware","srv1l_firmware","srv1m_firmware"],"published":"2025-09-24","updated":"2026-09-26","sourceUpdated":"2026-09-26T00:10:00.127","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-21487","references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html","label":"product-security@qualcomm.com"}],"tags":["nvd"],"epss":0.00259,"epssPercentile":0.15729,"ingestedAt":"2026-09-26T00:22:39.954Z","slug":"CVE-2025-21487","body":"## Overview\n\nInformation disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.\n\n## Affected\n\n- `apq8017_firmware`\n- `apq8064au_firmware`\n- `aqt1000_firmware`\n- `fastconnect_6200_firmware`\n- `fastconnect_6700_firmware`\n- `snapdragon_460_mobile_platform_firmware`\n- `snapdragon_480_5g_mobile_platform_firmware`\n- `snapdragon_480+_5g_mobile_platform_(sm4350-ac)_firmware`\n- `snapdragon_625_mobile_platform_firmware`\n- `snapdragon_626_mobile_platform_firmware`\n- `snapdragon_630_mobile_platform_firmware`\n- `snapdragon_632_mobile_platform_firmware`\n- `snapdragon_636_mobile_platform_firmware`\n- `snapdragon_660_mobile_platform_firmware`\n- `snapdragon_662_mobile_platform_firmware`\n- `snapdragon_670_mobile_platform_firmware`\n- `snapdragon_675_mobile_platform_firmware`\n- `snapdragon_678_mobile_platform_(sm6150-ac)_firmware`\n- `snapdragon_680_4g_mobile_platform_firmware`\n- `snapdragon_685_4g_mobile_platform_(sm6225-ad)_firmware`\n- `snapdragon_690_5g_mobile_platform_firmware`\n- `snapdragon_695_5g_mobile_platform_firmware`\n- `snapdragon_710_mobile_platform_firmware`\n- `snapdragon_720g_mobile_platform_firmware`\n- `snapdragon_730_mobile_platform_(sm7150-aa)_firmware`\n- `snapdragon_730g_mobile_platform_(sm7150-ab)_firmware`\n- `snapdragon_732g_mobile_platform_(sm7150-ac)_firmware`\n- `snapdragon_750g_5g_mobile_platform_firmware`\n- `snapdragon_765_5g_mobile_platform_(sm7250-aa)_firmware`\n- `snapdragon_765g_5g_mobile_platform_(sm7250-ab)_firmware`\n- `snapdragon_768g_5g_mobile_platform_(sm7250-ac)_firmware`\n- `snapdragon_778g_5g_mobile_platform_firmware`\n- `snapdragon_778g+_5g_mobile_platform_(sm7325-ae)_firmware`\n- `snapdragon_780g_5g_mobile_platform_firmware`\n- `snapdragon_782g_mobile_platform_(sm7325-af)_firmware`\n- `snapdragon_7c+_gen_3_compute_firmware`\n- `snapdragon_8_gen_1_mobile_platform_firmware`\n- `snapdragon_8_gen_2_mobile_platform_firmware`\n- `snapdragon_8_gen_3_mobile_platform_firmware`\n- `snapdragon_8+_gen_1_mobile_platform_firmware`\n- `snapdragon_8+_gen_2_mobile_platform_firmware`\n- `snapdragon_820_automotive_platform_firmware`\n- `snapdragon_835_mobile_pc_platform_firmware`\n- `snapdragon_845_mobile_platform_firmware`\n- `snapdragon_855_mobile_platform_firmware`\n- `fastconnect_6800_firmware`\n- `fastconnect_6900_firmware`\n- `fastconnect_7800_firmware`\n- `msm8996au_firmware`\n- `qam8255p_firmware`\n- `qam8295p_firmware`\n- `qam8620p_firmware`\n- `qam8650p_firmware`\n- `qam8775p_firmware`\n- `qamsrv1h_firmware`\n- `qamsrv1m_firmware`\n- `qca6310_firmware`\n- `qca6320_firmware`\n- `qca6335_firmware`\n- `qca6391_firmware`\n- `qca6420_firmware`\n- `qca6426_firmware`\n- `qca6430_firmware`\n- `qca6436_firmware`\n- `qca6564_firmware`\n- `qca6564a_firmware`\n- `qca6564au_firmware`\n- `qca6574_firmware`\n- `qca6574a_firmware`\n- `qca6574au_firmware`\n- `qca6595_firmware`\n- `qca6595au_firmware`\n- `qca6678aq_firmware`\n- `qca6688aq_firmware`\n- `qca6696_firmware`\n- `qca6698aq_firmware`\n- `qca6797aq_firmware`\n- `qcm2150_firmware`\n- `qcm2290_firmware`\n- `qcm4290_firmware`\n- `qcm4325_firmware`\n- `qcm4490_firmware`\n- `qcm5430_firmware`\n- `qcm6125_firmware`\n- `qcm6490_firmware`\n- `snapdragon_855+/860_mobile_platform_(sm8150-ac)_firmware`\n- `snapdragon_865_5g_mobile_platform_firmware`\n- `snapdragon_865+_5g_mobile_platform_(sm8250-ab)_firmware`\n- `snapdragon_870_5g_mobile_platform_(sm8250-ac)_firmware`\n- `snapdragon_888_5g_mobile_platform_firmware`\n- `snapdragon_888+_5g_mobile_platform_(sm8350-ac)_firmware`\n- `snapdragon_w5+_gen_1_wearable_platform_firmware`\n- `snapdragon_x50_5g_modem-rf_system_firmware`\n- `snapdragon_x55_5g_modem-rf_system_firmware`\n- `snapdragon_xr1_platform_firmware`\n- `snapdragon_xr2_5g_platform_firmware`\n- `snapdragon_xr2+_gen_1_platform_firmware`\n- `srv1h_firmware`\n- `srv1l_firmware`\n- `srv1m_firmware`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":45.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}