---
id: CVE-2025-21488
title: >-
  Information disclosure while decoding this RTP packet headers received by UE
  from the network when the padding bit is set.
summary: >-
  Information disclosure while decoding this RTP packet headers received by UE
  from the network when the padding bit is set.
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L'
cwe:
  - CWE-126
vendor: qualcomm
product: fastconnect_6200_firmware
affected:
  - fastconnect_6200_firmware
  - fastconnect_6700_firmware
  - fastconnect_6900_firmware
  - fastconnect_7800_firmware
  - msm8996au_firmware
  - qca6564_firmware
  - qca6564a_firmware
  - qca6564au_firmware
  - qca6574_firmware
  - qca6574a_firmware
  - qca6574au_firmware
  - qca6595au_firmware
  - qca6696_firmware
  - qcm4490_firmware
  - qcs410_firmware
  - qcs4490_firmware
  - qcs610_firmware
  - qmp1000_firmware
  - video_collaboration_vc1_platform_firmware
  - video_collaboration_vc3_platform_firmware
  - sa6145p_firmware
  - sa6155_firmware
  - sa6155p_firmware
  - sa8155_firmware
  - sa8155p_firmware
  - sd_8_gen1_5g_firmware
  - sd660_firmware
  - sd670_firmware
  - sd865_5g_firmware
  - sdm429w_firmware
  - sg4150p_firmware
  - sm4125_firmware
  - sm4635_firmware
  - sm6370_firmware
  - sm6650_firmware
  - sm7635_firmware
  - sm7675_firmware
  - sm7675p_firmware
  - sm8550p_firmware
  - sm8635_firmware
  - sm8635p_firmware
  - sm8650q_firmware
  - sm8735_firmware
  - sm8750_firmware
  - sm8750p_firmware
  - snapdragon_4_gen_1_mobile_platform_firmware
  - snapdragon_4_gen_2_mobile_platform_firmware
  - snapdragon_429_mobile_platform_firmware
  - snapdragon_460_mobile_platform_firmware
  - snapdragon_480_5g_mobile_platform_firmware
  - snapdragon_480+_5g_mobile_platform_(sm4350-ac)_firmware
  - snapdragon_660_mobile_platform_firmware
  - snapdragon_662_mobile_platform_firmware
  - snapdragon_670_mobile_platform_firmware
  - snapdragon_680_4g_mobile_platform_firmware
  - snapdragon_685_4g_mobile_platform_(sm6225-ad)_firmware
  - snapdragon_695_5g_mobile_platform_firmware
  - snapdragon_710_mobile_platform_firmware
  - snapdragon_8_gen_1_mobile_platform_firmware
  - snapdragon_8_gen_2_mobile_platform_firmware
  - snapdragon_8_gen_3_mobile_platform_firmware
  - snapdragon_8+_gen_1_mobile_platform_firmware
  - snapdragon_8+_gen_2_mobile_platform_firmware
  - snapdragon_820_automotive_platform_firmware
  - snapdragon_845_mobile_platform_firmware
  - snapdragon_w5+_gen_1_wearable_platform_firmware
  - snapdragon_xr1_platform_firmware
  - snapdragon_xr2_5g_platform_firmware
  - snapdragon_xr2+_gen_1_platform_firmware
  - sw5100_firmware
  - sw5100p_firmware
  - sxr1120_firmware
  - talynplus_firmware
  - wcd9326_firmware
  - wcd9335_firmware
  - wcd9340_firmware
  - wcd9341_firmware
  - wcd9370_firmware
  - wcd9375_firmware
  - wcd9378_firmware
  - wcd9380_firmware
  - wcd9385_firmware
  - wcd9390_firmware
  - wcd9395_firmware
  - wcn3620_firmware
  - wcn3660b_firmware
  - wcn3910_firmware
  - wcn3950_firmware
  - wcn3980_firmware
  - wcn3988_firmware
  - wcn3990_firmware
  - wcn6450_firmware
  - wcn6650_firmware
  - wcn6740_firmware
  - wcn6755_firmware
  - wcn7750_firmware
  - wcn7860_firmware
  - wcn7861_firmware
  - wcn7880_firmware
  - wcn7881_firmware
published: '2025-09-24'
updated: '2026-09-26'
sourceUpdated: '2026-09-26T00:10:00.127'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-21488'
references:
  - url: >-
      https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
    label: product-security@qualcomm.com
tags:
  - nvd
epss: 0.00265
epssPercentile: 0.16405
ingestedAt: '2026-09-26T00:22:39.954Z'
---

## Overview

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

## Affected

- `fastconnect_6200_firmware`
- `fastconnect_6700_firmware`
- `fastconnect_6900_firmware`
- `fastconnect_7800_firmware`
- `msm8996au_firmware`
- `qca6564_firmware`
- `qca6564a_firmware`
- `qca6564au_firmware`
- `qca6574_firmware`
- `qca6574a_firmware`
- `qca6574au_firmware`
- `qca6595au_firmware`
- `qca6696_firmware`
- `qcm4490_firmware`
- `qcs410_firmware`
- `qcs4490_firmware`
- `qcs610_firmware`
- `qmp1000_firmware`
- `video_collaboration_vc1_platform_firmware`
- `video_collaboration_vc3_platform_firmware`
- `sa6145p_firmware`
- `sa6155_firmware`
- `sa6155p_firmware`
- `sa8155_firmware`
- `sa8155p_firmware`
- `sd_8_gen1_5g_firmware`
- `sd660_firmware`
- `sd670_firmware`
- `sd865_5g_firmware`
- `sdm429w_firmware`
- `sg4150p_firmware`
- `sm4125_firmware`
- `sm4635_firmware`
- `sm6370_firmware`
- `sm6650_firmware`
- `sm7635_firmware`
- `sm7675_firmware`
- `sm7675p_firmware`
- `sm8550p_firmware`
- `sm8635_firmware`
- `sm8635p_firmware`
- `sm8650q_firmware`
- `sm8735_firmware`
- `sm8750_firmware`
- `sm8750p_firmware`
- `snapdragon_4_gen_1_mobile_platform_firmware`
- `snapdragon_4_gen_2_mobile_platform_firmware`
- `snapdragon_429_mobile_platform_firmware`
- `snapdragon_460_mobile_platform_firmware`
- `snapdragon_480_5g_mobile_platform_firmware`
- `snapdragon_480+_5g_mobile_platform_(sm4350-ac)_firmware`
- `snapdragon_660_mobile_platform_firmware`
- `snapdragon_662_mobile_platform_firmware`
- `snapdragon_670_mobile_platform_firmware`
- `snapdragon_680_4g_mobile_platform_firmware`
- `snapdragon_685_4g_mobile_platform_(sm6225-ad)_firmware`
- `snapdragon_695_5g_mobile_platform_firmware`
- `snapdragon_710_mobile_platform_firmware`
- `snapdragon_8_gen_1_mobile_platform_firmware`
- `snapdragon_8_gen_2_mobile_platform_firmware`
- `snapdragon_8_gen_3_mobile_platform_firmware`
- `snapdragon_8+_gen_1_mobile_platform_firmware`
- `snapdragon_8+_gen_2_mobile_platform_firmware`
- `snapdragon_820_automotive_platform_firmware`
- `snapdragon_845_mobile_platform_firmware`
- `snapdragon_w5+_gen_1_wearable_platform_firmware`
- `snapdragon_xr1_platform_firmware`
- `snapdragon_xr2_5g_platform_firmware`
- `snapdragon_xr2+_gen_1_platform_firmware`
- `sw5100_firmware`
- `sw5100p_firmware`
- `sxr1120_firmware`
- `talynplus_firmware`
- `wcd9326_firmware`
- `wcd9335_firmware`
- `wcd9340_firmware`
- `wcd9341_firmware`
- `wcd9370_firmware`
- `wcd9375_firmware`
- `wcd9378_firmware`
- `wcd9380_firmware`
- `wcd9385_firmware`
- `wcd9390_firmware`
- `wcd9395_firmware`
- `wcn3620_firmware`
- `wcn3660b_firmware`
- `wcn3910_firmware`
- `wcn3950_firmware`
- `wcn3980_firmware`
- `wcn3988_firmware`
- `wcn3990_firmware`
- `wcn6450_firmware`
- `wcn6650_firmware`
- `wcn6740_firmware`
- `wcn6755_firmware`
- `wcn7750_firmware`
- `wcn7860_firmware`
- `wcn7861_firmware`
- `wcn7880_firmware`
- `wcn7881_firmware`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.