CVE-2025-21436
HIGHCVSS 7.8/10EPSS 0.09%
Last modified
CVE-2025-21436 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.. EPSS estimates a 0.09% chance of exploitation in the next 30 days.
Description
Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Fastconnect 7800 Firmware | All versions |
| Qualcomm | Qmp1000 Firmware | All versions |
| Qualcomm | Sm8735 Firmware | All versions |
| Qualcomm | Sm8750 Firmware | All versions |
| Qualcomm | Sm8750p Firmware | All versions |
| Qualcomm | Snapdragon 8 Gen 3 Mobile Platform Firmware | All versions |
| Qualcomm | Snapdragon W5\+ Gen 1 Wearable Platform Firmware | All versions |
| Qualcomm | Sw5100 Firmware | All versions |
| Qualcomm | Sw5100p Firmware | All versions |
| Qualcomm | Sxr2330p Firmware | All versions |
| Qualcomm | Wcd9378 Firmware | All versions |
| Qualcomm | Wcd9380 Firmware | All versions |
| Qualcomm | Wcd9390 Firmware | All versions |
| Qualcomm | Wcd9395 Firmware | All versions |
| Qualcomm | Wcn7750 Firmware | All versions |
| Qualcomm | Wcn7860 Firmware | All versions |
| Qualcomm | Wcn7861 Firmware | All versions |
| Qualcomm | Wcn7880 Firmware | All versions |
| Qualcomm | Wcn7881 Firmware | All versions |
| Qualcomm | Wsa8830 Firmware | All versions |
| Qualcomm | Wsa8832 Firmware | All versions |
| Qualcomm | Wsa8835 Firmware | All versions |
| Qualcomm | Wsa8840 Firmware | All versions |
| Qualcomm | Wsa8845 Firmware | All versions |
| Qualcomm | Wsa8845h Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-21436?
Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.
How severe is CVE-2025-21436?
CVE-2025-21436 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.09% probability of exploitation in the next 30 days.
How do I fix CVE-2025-21436?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-21430Transient DOS while connecting STA to AP and initiating ADD …7.5
- CVE-2025-21431Information disclosure may be there when a guest VM is conne…4.7
- CVE-2025-21432Memory corruption while retrieving the CBOR data from TA.7.8
- CVE-2025-21433Transient DOS when importing a PKCS#8-encoded RSA private ke…5.5
- CVE-2025-21434Transient DOS may occur while parsing EHT operation IE or EH…7.5
- CVE-2025-21435Transient DOS may occur while parsing extended IE in beacon.7.5
- CVE-2025-21437Memory corruption while processing memory map or unmap IOCTL…7.8
- CVE-2025-21438Memory corruption while IOCTL call is invoked from user-spac…7.8
- CVE-2025-21439Memory corruption may occur while reading board data via IOC…7.8
- CVE-2025-21440Memory corruption when IOCTL call is invoked from user-space…7.8
- CVE-2025-21441Memory corruption when IOCTL call is invoked from user-space…7.8
- CVE-2025-21442Memory corruption while transmitting packet mapping informat…7.8
Are you affected by CVE-2025-21436?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST