CVE-2025-21430
HIGHCVSS 7.5/10EPSS 0.23%
Last modified
CVE-2025-21430 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | 315 5g Iot Modem Firmware | All versions |
| Qualcomm | Apq8017 Firmware | All versions |
| Qualcomm | Apq8064au Firmware | All versions |
| Qualcomm | Aqt1000 Firmware | All versions |
| Qualcomm | Ar8031 Firmware | All versions |
| Qualcomm | Qcs9100 Firmware | All versions |
| Qualcomm | Qep8111 Firmware | All versions |
| Qualcomm | Qfw7114 Firmware | All versions |
| Qualcomm | Qfw7124 Firmware | All versions |
| Qualcomm | Qrb5165m Firmware | All versions |
| Qualcomm | Qrb5165n Firmware | All versions |
| Qualcomm | Qualcomm 205 Mobile Platform Firmware | All versions |
| Qualcomm | Video Collaboration Vc1 Platform Firmware | All versions |
| Qualcomm | Video Collaboration Vc3 Platform Firmware | All versions |
| Qualcomm | Video Collaboration Vc5 Platform Firmware | All versions |
| Qualcomm | Robotics Rb3 Platform Firmware | All versions |
| Qualcomm | Robotics Rb5 Platform Firmware | All versions |
| Qualcomm | Sa2150p Firmware | All versions |
| Qualcomm | Sa4150p Firmware | All versions |
| Qualcomm | Sa4155p Firmware | All versions |
| Qualcomm | Sa6145p Firmware | All versions |
| Qualcomm | Sa6150p Firmware | All versions |
| Qualcomm | Sa6155 Firmware | All versions |
| Qualcomm | Sa6155p Firmware | All versions |
| Qualcomm | Sa7255p Firmware | All versions |
| Qualcomm | Sa7775p Firmware | All versions |
| Qualcomm | Sa8145p Firmware | All versions |
| Qualcomm | Sa8150p Firmware | All versions |
| Qualcomm | Sa8155 Firmware | All versions |
| Qualcomm | Sa8155p Firmware | All versions |
| Qualcomm | Sa8195p Firmware | All versions |
| Qualcomm | Sa8255p Firmware | All versions |
| Qualcomm | Sa8295p Firmware | All versions |
| Qualcomm | Sa8530p Firmware | All versions |
| Qualcomm | Sa8540p Firmware | All versions |
| Qualcomm | Sa8620p Firmware | All versions |
| Qualcomm | Sa8650p Firmware | All versions |
| Qualcomm | Sa8770p Firmware | All versions |
| Qualcomm | Sa8775p Firmware | All versions |
| Qualcomm | Sa9000p Firmware | All versions |
| Qualcomm | Sd 8 Gen1 5g Firmware | All versions |
| Qualcomm | Sd660 Firmware | All versions |
| Qualcomm | Sd730 Firmware | All versions |
| Qualcomm | Sd835 Firmware | All versions |
| Qualcomm | Sd855 Firmware | All versions |
| Qualcomm | Ar8035 Firmware | All versions |
| Qualcomm | Csra6620 Firmware | All versions |
| Qualcomm | Csra6640 Firmware | All versions |
| Qualcomm | Csrb31024 Firmware | All versions |
| Qualcomm | Fastconnect 6200 Firmware | All versions |
Showing 50 of 225 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-21430?
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
How severe is CVE-2025-21430?
CVE-2025-21430 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.23% probability of exploitation in the next 30 days.
How do I fix CVE-2025-21430?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-21424Memory corruption while calling the NPU driver APIs concurre…7.8
- CVE-2025-21425Memory corruption may occur due top improper access control …7.8
- CVE-2025-21426Memory corruption while processing camera TPG write request.7.8
- CVE-2025-21427Information disclosure while decoding this RTP packet Payloa…8.2
- CVE-2025-21428Memory corruption occurs while connecting a STA to an AP and…7.5
- CVE-2025-21429Memory corruption occurs while connecting a STA to an AP and…7.5
- CVE-2025-21431Information disclosure may be there when a guest VM is conne…4.7
- CVE-2025-21432Memory corruption while retrieving the CBOR data from TA.7.8
- CVE-2025-21433Transient DOS when importing a PKCS#8-encoded RSA private ke…5.5
- CVE-2025-21434Transient DOS may occur while parsing EHT operation IE or EH…7.5
- CVE-2025-21435Transient DOS may occur while parsing extended IE in beacon.7.5
- CVE-2025-21436Memory corruption may occur while initiating two IOCTL calls…7.8
Are you affected by CVE-2025-21430?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
