Vulnerability · Published Apr 7, 2025 · Assigned by qualcomm
CVE-2025-21441Out-of-bounds Read in Windows WLAN Host
High 7.8
In plain English
A high-severity out-of-bounds write in Snapdragon from Qualcomm, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 98.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | py3-urllib3 | 1.26.18-r2 | ALPINE-CVE-2025-21441 |
| Alpine:v3.21 | py3-urllib3 | 1.26.20-r1 | ALPINE-CVE-2025-21441 |
| Alpine:v3.22 | py3-urllib3 | 1.26.20-r1 | ALPINE-CVE-2025-21441 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm, Inc. | Snapdragon | AQT1000FastConnect 6200FastConnect 6700FastConnect 6800FastConnect 6900FastConnect 7800QCA1062QCA1064 |
Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H