CVE-2025-21484High· 8.2▾ TwilightInformation disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 45.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
sm8750_firmwaresm8750p_firmwaresm8850_firmwaresm8850p_firmwaresmart_audio_200_platform_firmwaresmart_display_200_platform_firmwaresnapdragon_208_processor_firmwaresnapdragon_210_processor_firmwaresnapdragon_212_mobile_platform_firmwaresnapdragon_4_gen_1_mobile_platform_firmwaresnapdragon_429_mobile_platform_firmwaresnapdragon_460_mobile_platform_firmwaresnapdragon_480_5g_mobile_platform_firmwaresnapdragon_480+_5g_mobile_platform_(sm4350-ac)_firmwaresnapdragon_625_mobile_platform_firmwaresnapdragon_626_mobile_platform_firmwaresnapdragon_660_mobile_platform_firmwaresnapdragon_662_mobile_platform_firmwaresnapdragon_675_mobile_platform_firmwaresnapdragon_678_mobile_platform_(sm6150-ac)_firmwaresnapdragon_680_4g_mobile_platform_firmwaresnapdragon_685_4g_mobile_platform_(sm6225-ad)_firmwaresnapdragon_690_5g_mobile_platform_firmwaresnapdragon_695_5g_mobile_platform_firmwaresnapdragon_720g_mobile_platform_firmwaresnapdragon_730_mobile_platform_(sm7150-aa)_firmwaresnapdragon_730g_mobile_platform_(sm7150-ab)_firmwaresnapdragon_732g_mobile_platform_(sm7150-ac)_firmwaresnapdragon_750g_5g_mobile_platform_firmwaresnapdragon_765_5g_mobile_platform_(sm7250-aa)_firmwaresnapdragon_765g_5g_mobile_platform_(sm7250-ab)_firmwaresnapdragon_768g_5g_mobile_platform_(sm7250-ac)_firmwaresnapdragon_8_gen_3_mobile_platform_firmwaresnapdragon_8+_gen_1_mobile_platform_firmwaresnapdragon_820_automotive_platform_firmwaresnapdragon_835_mobile_pc_platform_firmwaresnapdragon_845_mobile_platform_firmwaresnapdragon_855_mobile_platform_firmwaresnapdragon_855+/860_mobile_platform_(sm8150-ac)_firmwaresnapdragon_865_5g_mobile_platform_firmwareapq8064au_firmwareaqt1000_firmwarefastconnect_6200_firmwarefastconnect_6700_firmwarefastconnect_6800_firmwarefastconnect_6900_firmwarefastconnect_7800_firmwaremsm8108_firmwaremsm8209_firmwaremsm8608_firmwaremsm8996au_firmwareqam8255p_firmwareqam8295p_firmwareqam8650p_firmwareqam8775p_firmwareqca6310_firmwareqca6320_firmwareqca6335_firmwareqca6391_firmwareqca6420_firmwareqca6426_firmwareqca6430_firmwareqca6436_firmwareqca6564_firmwareqca6564a_firmwareqca6564au_firmwareqca6574_firmwareqca6574a_firmwareqca6574au_firmwareqca6595_firmwareqca6595au_firmwareqca6678aq_firmwareqca6688aq_firmwareqca6696_firmwareqca6698aq_firmwareqca6698au_firmwareqca6797aq_firmwareqcm4490_firmwareqcm5430_firmwareqcm6125_firmwareqcm6490_firmwareqcs410_firmwareqcs4490_firmwareqcs5430_firmwareqcs610_firmwareqcs6125_firmwareqcs6490_firmwarequalcomm_205_mobile_platform_firmwarequalcomm_215_mobile_platform_firmwarevideo_collaboration_vc1_platform_firmwarevideo_collaboration_vc3_platform_firmwarerobotics_rb3_platform_firmwaresa4150p_firmwaresa4155p_firmwaresa6145p_firmwaresa6150p_firmwaresa6155_firmwaresa6155p_firmwaresa7255p_firmwaresa7775p_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-27036Medium· 6.1Information disclosure when Video engine escape input data is less than expected minimum size.
CVE-2025-27033Medium· 6.1Information disclosure while running video usecase having rogue firmware.
CVE-2025-27030Medium· 6.1information disclosure while invoking calibration data from user space to update firmware size.
CVE-2025-21488High· 8.2Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
CVE-2025-21487High· 8.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
CVE-2025-21482High· 7.1Cryptographic issue while performing RSA PKCS padding decoding.