CVE-2025-21488High· 8.2▾ TwilightInformation disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 45.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
fastconnect_6200_firmwarefastconnect_6700_firmwarefastconnect_6900_firmwarefastconnect_7800_firmwaremsm8996au_firmwareqca6564_firmwareqca6564a_firmwareqca6564au_firmwareqca6574_firmwareqca6574a_firmwareqca6574au_firmwareqca6595au_firmwareqca6696_firmwareqcm4490_firmwareqcs410_firmwareqcs4490_firmwareqcs610_firmwareqmp1000_firmwarevideo_collaboration_vc1_platform_firmwarevideo_collaboration_vc3_platform_firmwaresa6145p_firmwaresa6155_firmwaresa6155p_firmwaresa8155_firmwaresa8155p_firmwaresd_8_gen1_5g_firmwaresd660_firmwaresd670_firmwaresd865_5g_firmwaresdm429w_firmwaresg4150p_firmwaresm4125_firmwaresm4635_firmwaresm6370_firmwaresm6650_firmwaresm7635_firmwaresm7675_firmwaresm7675p_firmwaresm8550p_firmwaresm8635_firmwaresm8635p_firmwaresm8650q_firmwaresm8735_firmwaresm8750_firmwaresm8750p_firmwaresnapdragon_4_gen_1_mobile_platform_firmwaresnapdragon_4_gen_2_mobile_platform_firmwaresnapdragon_429_mobile_platform_firmwaresnapdragon_460_mobile_platform_firmwaresnapdragon_480_5g_mobile_platform_firmwaresnapdragon_480+_5g_mobile_platform_(sm4350-ac)_firmwaresnapdragon_660_mobile_platform_firmwaresnapdragon_662_mobile_platform_firmwaresnapdragon_670_mobile_platform_firmwaresnapdragon_680_4g_mobile_platform_firmwaresnapdragon_685_4g_mobile_platform_(sm6225-ad)_firmwaresnapdragon_695_5g_mobile_platform_firmwaresnapdragon_710_mobile_platform_firmwaresnapdragon_8_gen_1_mobile_platform_firmwaresnapdragon_8_gen_2_mobile_platform_firmwaresnapdragon_8_gen_3_mobile_platform_firmwaresnapdragon_8+_gen_1_mobile_platform_firmwaresnapdragon_8+_gen_2_mobile_platform_firmwaresnapdragon_820_automotive_platform_firmwaresnapdragon_845_mobile_platform_firmwaresnapdragon_w5+_gen_1_wearable_platform_firmwaresnapdragon_xr1_platform_firmwaresnapdragon_xr2_5g_platform_firmwaresnapdragon_xr2+_gen_1_platform_firmwaresw5100_firmwaresw5100p_firmwaresxr1120_firmwaretalynplus_firmwarewcd9326_firmwarewcd9335_firmwarewcd9340_firmwarewcd9341_firmwarewcd9370_firmwarewcd9375_firmwarewcd9378_firmwarewcd9380_firmwarewcd9385_firmwarewcd9390_firmwarewcd9395_firmwarewcn3620_firmwarewcn3660b_firmwarewcn3910_firmwarewcn3950_firmwarewcn3980_firmwarewcn3988_firmwarewcn3990_firmwarewcn6450_firmwarewcn6650_firmwarewcn6740_firmwarewcn6755_firmwarewcn7750_firmwarewcn7860_firmwarewcn7861_firmwarewcn7880_firmwarewcn7881_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-27036Medium· 6.1Information disclosure when Video engine escape input data is less than expected minimum size.
CVE-2025-27033Medium· 6.1Information disclosure while running video usecase having rogue firmware.
CVE-2025-27030Medium· 6.1information disclosure while invoking calibration data from user space to update firmware size.
CVE-2025-21487High· 8.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
CVE-2025-21484High· 8.2Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
CVE-2025-21482High· 7.1Cryptographic issue while performing RSA PKCS padding decoding.