---
id: CVE-2025-21487
title: >-
  Information disclosure while decoding RTP packet received by UE from the
  network, when payload length mentioned is greater than the available buffer
  length.
summary: >-
  Information disclosure while decoding RTP packet received by UE from the
  network, when payload length mentioned is greater than the available buffer
  length.
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L'
cwe:
  - CWE-126
vendor: qualcomm
product: apq8017_firmware
affected:
  - apq8017_firmware
  - apq8064au_firmware
  - aqt1000_firmware
  - fastconnect_6200_firmware
  - fastconnect_6700_firmware
  - snapdragon_460_mobile_platform_firmware
  - snapdragon_480_5g_mobile_platform_firmware
  - snapdragon_480+_5g_mobile_platform_(sm4350-ac)_firmware
  - snapdragon_625_mobile_platform_firmware
  - snapdragon_626_mobile_platform_firmware
  - snapdragon_630_mobile_platform_firmware
  - snapdragon_632_mobile_platform_firmware
  - snapdragon_636_mobile_platform_firmware
  - snapdragon_660_mobile_platform_firmware
  - snapdragon_662_mobile_platform_firmware
  - snapdragon_670_mobile_platform_firmware
  - snapdragon_675_mobile_platform_firmware
  - snapdragon_678_mobile_platform_(sm6150-ac)_firmware
  - snapdragon_680_4g_mobile_platform_firmware
  - snapdragon_685_4g_mobile_platform_(sm6225-ad)_firmware
  - snapdragon_690_5g_mobile_platform_firmware
  - snapdragon_695_5g_mobile_platform_firmware
  - snapdragon_710_mobile_platform_firmware
  - snapdragon_720g_mobile_platform_firmware
  - snapdragon_730_mobile_platform_(sm7150-aa)_firmware
  - snapdragon_730g_mobile_platform_(sm7150-ab)_firmware
  - snapdragon_732g_mobile_platform_(sm7150-ac)_firmware
  - snapdragon_750g_5g_mobile_platform_firmware
  - snapdragon_765_5g_mobile_platform_(sm7250-aa)_firmware
  - snapdragon_765g_5g_mobile_platform_(sm7250-ab)_firmware
  - snapdragon_768g_5g_mobile_platform_(sm7250-ac)_firmware
  - snapdragon_778g_5g_mobile_platform_firmware
  - snapdragon_778g+_5g_mobile_platform_(sm7325-ae)_firmware
  - snapdragon_780g_5g_mobile_platform_firmware
  - snapdragon_782g_mobile_platform_(sm7325-af)_firmware
  - snapdragon_7c+_gen_3_compute_firmware
  - snapdragon_8_gen_1_mobile_platform_firmware
  - snapdragon_8_gen_2_mobile_platform_firmware
  - snapdragon_8_gen_3_mobile_platform_firmware
  - snapdragon_8+_gen_1_mobile_platform_firmware
  - snapdragon_8+_gen_2_mobile_platform_firmware
  - snapdragon_820_automotive_platform_firmware
  - snapdragon_835_mobile_pc_platform_firmware
  - snapdragon_845_mobile_platform_firmware
  - snapdragon_855_mobile_platform_firmware
  - fastconnect_6800_firmware
  - fastconnect_6900_firmware
  - fastconnect_7800_firmware
  - msm8996au_firmware
  - qam8255p_firmware
  - qam8295p_firmware
  - qam8620p_firmware
  - qam8650p_firmware
  - qam8775p_firmware
  - qamsrv1h_firmware
  - qamsrv1m_firmware
  - qca6310_firmware
  - qca6320_firmware
  - qca6335_firmware
  - qca6391_firmware
  - qca6420_firmware
  - qca6426_firmware
  - qca6430_firmware
  - qca6436_firmware
  - qca6564_firmware
  - qca6564a_firmware
  - qca6564au_firmware
  - qca6574_firmware
  - qca6574a_firmware
  - qca6574au_firmware
  - qca6595_firmware
  - qca6595au_firmware
  - qca6678aq_firmware
  - qca6688aq_firmware
  - qca6696_firmware
  - qca6698aq_firmware
  - qca6797aq_firmware
  - qcm2150_firmware
  - qcm2290_firmware
  - qcm4290_firmware
  - qcm4325_firmware
  - qcm4490_firmware
  - qcm5430_firmware
  - qcm6125_firmware
  - qcm6490_firmware
  - snapdragon_855+/860_mobile_platform_(sm8150-ac)_firmware
  - snapdragon_865_5g_mobile_platform_firmware
  - snapdragon_865+_5g_mobile_platform_(sm8250-ab)_firmware
  - snapdragon_870_5g_mobile_platform_(sm8250-ac)_firmware
  - snapdragon_888_5g_mobile_platform_firmware
  - snapdragon_888+_5g_mobile_platform_(sm8350-ac)_firmware
  - snapdragon_w5+_gen_1_wearable_platform_firmware
  - snapdragon_x50_5g_modem-rf_system_firmware
  - snapdragon_x55_5g_modem-rf_system_firmware
  - snapdragon_xr1_platform_firmware
  - snapdragon_xr2_5g_platform_firmware
  - snapdragon_xr2+_gen_1_platform_firmware
  - srv1h_firmware
  - srv1l_firmware
  - srv1m_firmware
published: '2025-09-24'
updated: '2026-09-26'
sourceUpdated: '2026-09-26T00:10:00.127'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-21487'
references:
  - url: >-
      https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
    label: product-security@qualcomm.com
tags:
  - nvd
epss: 0.00259
epssPercentile: 0.15729
ingestedAt: '2026-09-26T00:22:39.954Z'
---

## Overview

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

## Affected

- `apq8017_firmware`
- `apq8064au_firmware`
- `aqt1000_firmware`
- `fastconnect_6200_firmware`
- `fastconnect_6700_firmware`
- `snapdragon_460_mobile_platform_firmware`
- `snapdragon_480_5g_mobile_platform_firmware`
- `snapdragon_480+_5g_mobile_platform_(sm4350-ac)_firmware`
- `snapdragon_625_mobile_platform_firmware`
- `snapdragon_626_mobile_platform_firmware`
- `snapdragon_630_mobile_platform_firmware`
- `snapdragon_632_mobile_platform_firmware`
- `snapdragon_636_mobile_platform_firmware`
- `snapdragon_660_mobile_platform_firmware`
- `snapdragon_662_mobile_platform_firmware`
- `snapdragon_670_mobile_platform_firmware`
- `snapdragon_675_mobile_platform_firmware`
- `snapdragon_678_mobile_platform_(sm6150-ac)_firmware`
- `snapdragon_680_4g_mobile_platform_firmware`
- `snapdragon_685_4g_mobile_platform_(sm6225-ad)_firmware`
- `snapdragon_690_5g_mobile_platform_firmware`
- `snapdragon_695_5g_mobile_platform_firmware`
- `snapdragon_710_mobile_platform_firmware`
- `snapdragon_720g_mobile_platform_firmware`
- `snapdragon_730_mobile_platform_(sm7150-aa)_firmware`
- `snapdragon_730g_mobile_platform_(sm7150-ab)_firmware`
- `snapdragon_732g_mobile_platform_(sm7150-ac)_firmware`
- `snapdragon_750g_5g_mobile_platform_firmware`
- `snapdragon_765_5g_mobile_platform_(sm7250-aa)_firmware`
- `snapdragon_765g_5g_mobile_platform_(sm7250-ab)_firmware`
- `snapdragon_768g_5g_mobile_platform_(sm7250-ac)_firmware`
- `snapdragon_778g_5g_mobile_platform_firmware`
- `snapdragon_778g+_5g_mobile_platform_(sm7325-ae)_firmware`
- `snapdragon_780g_5g_mobile_platform_firmware`
- `snapdragon_782g_mobile_platform_(sm7325-af)_firmware`
- `snapdragon_7c+_gen_3_compute_firmware`
- `snapdragon_8_gen_1_mobile_platform_firmware`
- `snapdragon_8_gen_2_mobile_platform_firmware`
- `snapdragon_8_gen_3_mobile_platform_firmware`
- `snapdragon_8+_gen_1_mobile_platform_firmware`
- `snapdragon_8+_gen_2_mobile_platform_firmware`
- `snapdragon_820_automotive_platform_firmware`
- `snapdragon_835_mobile_pc_platform_firmware`
- `snapdragon_845_mobile_platform_firmware`
- `snapdragon_855_mobile_platform_firmware`
- `fastconnect_6800_firmware`
- `fastconnect_6900_firmware`
- `fastconnect_7800_firmware`
- `msm8996au_firmware`
- `qam8255p_firmware`
- `qam8295p_firmware`
- `qam8620p_firmware`
- `qam8650p_firmware`
- `qam8775p_firmware`
- `qamsrv1h_firmware`
- `qamsrv1m_firmware`
- `qca6310_firmware`
- `qca6320_firmware`
- `qca6335_firmware`
- `qca6391_firmware`
- `qca6420_firmware`
- `qca6426_firmware`
- `qca6430_firmware`
- `qca6436_firmware`
- `qca6564_firmware`
- `qca6564a_firmware`
- `qca6564au_firmware`
- `qca6574_firmware`
- `qca6574a_firmware`
- `qca6574au_firmware`
- `qca6595_firmware`
- `qca6595au_firmware`
- `qca6678aq_firmware`
- `qca6688aq_firmware`
- `qca6696_firmware`
- `qca6698aq_firmware`
- `qca6797aq_firmware`
- `qcm2150_firmware`
- `qcm2290_firmware`
- `qcm4290_firmware`
- `qcm4325_firmware`
- `qcm4490_firmware`
- `qcm5430_firmware`
- `qcm6125_firmware`
- `qcm6490_firmware`
- `snapdragon_855+/860_mobile_platform_(sm8150-ac)_firmware`
- `snapdragon_865_5g_mobile_platform_firmware`
- `snapdragon_865+_5g_mobile_platform_(sm8250-ab)_firmware`
- `snapdragon_870_5g_mobile_platform_(sm8250-ac)_firmware`
- `snapdragon_888_5g_mobile_platform_firmware`
- `snapdragon_888+_5g_mobile_platform_(sm8350-ac)_firmware`
- `snapdragon_w5+_gen_1_wearable_platform_firmware`
- `snapdragon_x50_5g_modem-rf_system_firmware`
- `snapdragon_x55_5g_modem-rf_system_firmware`
- `snapdragon_xr1_platform_firmware`
- `snapdragon_xr2_5g_platform_firmware`
- `snapdragon_xr2+_gen_1_platform_firmware`
- `srv1h_firmware`
- `srv1l_firmware`
- `srv1m_firmware`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.