CVE-2025-21487High· 8.2▾ TwilightInformation disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 45.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
apq8017_firmwareapq8064au_firmwareaqt1000_firmwarefastconnect_6200_firmwarefastconnect_6700_firmwaresnapdragon_460_mobile_platform_firmwaresnapdragon_480_5g_mobile_platform_firmwaresnapdragon_480+_5g_mobile_platform_(sm4350-ac)_firmwaresnapdragon_625_mobile_platform_firmwaresnapdragon_626_mobile_platform_firmwaresnapdragon_630_mobile_platform_firmwaresnapdragon_632_mobile_platform_firmwaresnapdragon_636_mobile_platform_firmwaresnapdragon_660_mobile_platform_firmwaresnapdragon_662_mobile_platform_firmwaresnapdragon_670_mobile_platform_firmwaresnapdragon_675_mobile_platform_firmwaresnapdragon_678_mobile_platform_(sm6150-ac)_firmwaresnapdragon_680_4g_mobile_platform_firmwaresnapdragon_685_4g_mobile_platform_(sm6225-ad)_firmwaresnapdragon_690_5g_mobile_platform_firmwaresnapdragon_695_5g_mobile_platform_firmwaresnapdragon_710_mobile_platform_firmwaresnapdragon_720g_mobile_platform_firmwaresnapdragon_730_mobile_platform_(sm7150-aa)_firmwaresnapdragon_730g_mobile_platform_(sm7150-ab)_firmwaresnapdragon_732g_mobile_platform_(sm7150-ac)_firmwaresnapdragon_750g_5g_mobile_platform_firmwaresnapdragon_765_5g_mobile_platform_(sm7250-aa)_firmwaresnapdragon_765g_5g_mobile_platform_(sm7250-ab)_firmwaresnapdragon_768g_5g_mobile_platform_(sm7250-ac)_firmwaresnapdragon_778g_5g_mobile_platform_firmwaresnapdragon_778g+_5g_mobile_platform_(sm7325-ae)_firmwaresnapdragon_780g_5g_mobile_platform_firmwaresnapdragon_782g_mobile_platform_(sm7325-af)_firmwaresnapdragon_7c+_gen_3_compute_firmwaresnapdragon_8_gen_1_mobile_platform_firmwaresnapdragon_8_gen_2_mobile_platform_firmwaresnapdragon_8_gen_3_mobile_platform_firmwaresnapdragon_8+_gen_1_mobile_platform_firmwaresnapdragon_8+_gen_2_mobile_platform_firmwaresnapdragon_820_automotive_platform_firmwaresnapdragon_835_mobile_pc_platform_firmwaresnapdragon_845_mobile_platform_firmwaresnapdragon_855_mobile_platform_firmwarefastconnect_6800_firmwarefastconnect_6900_firmwarefastconnect_7800_firmwaremsm8996au_firmwareqam8255p_firmwareqam8295p_firmwareqam8620p_firmwareqam8650p_firmwareqam8775p_firmwareqamsrv1h_firmwareqamsrv1m_firmwareqca6310_firmwareqca6320_firmwareqca6335_firmwareqca6391_firmwareqca6420_firmwareqca6426_firmwareqca6430_firmwareqca6436_firmwareqca6564_firmwareqca6564a_firmwareqca6564au_firmwareqca6574_firmwareqca6574a_firmwareqca6574au_firmwareqca6595_firmwareqca6595au_firmwareqca6678aq_firmwareqca6688aq_firmwareqca6696_firmwareqca6698aq_firmwareqca6797aq_firmwareqcm2150_firmwareqcm2290_firmwareqcm4290_firmwareqcm4325_firmwareqcm4490_firmwareqcm5430_firmwareqcm6125_firmwareqcm6490_firmwaresnapdragon_855+/860_mobile_platform_(sm8150-ac)_firmwaresnapdragon_865_5g_mobile_platform_firmwaresnapdragon_865+_5g_mobile_platform_(sm8250-ab)_firmwaresnapdragon_870_5g_mobile_platform_(sm8250-ac)_firmwaresnapdragon_888_5g_mobile_platform_firmwaresnapdragon_888+_5g_mobile_platform_(sm8350-ac)_firmwaresnapdragon_w5+_gen_1_wearable_platform_firmwaresnapdragon_x50_5g_modem-rf_system_firmwaresnapdragon_x55_5g_modem-rf_system_firmwaresnapdragon_xr1_platform_firmwaresnapdragon_xr2_5g_platform_firmwaresnapdragon_xr2+_gen_1_platform_firmwaresrv1h_firmwaresrv1l_firmwaresrv1m_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-27036Medium· 6.1Information disclosure when Video engine escape input data is less than expected minimum size.
CVE-2025-27033Medium· 6.1Information disclosure while running video usecase having rogue firmware.
CVE-2025-27030Medium· 6.1information disclosure while invoking calibration data from user space to update firmware size.
CVE-2025-21488High· 8.2Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
CVE-2025-21484High· 8.2Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
CVE-2025-21482High· 7.1Cryptographic issue while performing RSA PKCS padding decoding.