Strix
26.1K

CVE-2025-21464

MEDIUMCVSS 6.5/10EPSS 0.08%

Last modified

CVE-2025-21464 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Information disclosure while reading data from an image using specified offset and size parameters.. EPSS estimates a 0.08% chance of exploitation in the next 30 days.

Description

Information disclosure while reading data from an image using specified offset and size parameters.

Metrics

CVSS 3.1
6.5/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS Probability
0.08%

0.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
QualcommQcm4490 FirmwareAll versions
QualcommQcm5430 FirmwareAll versions
QualcommQcm6125 FirmwareAll versions
QualcommQcm6490 FirmwareAll versions
QualcommQcm8550 FirmwareAll versions
QualcommQcn5021 FirmwareAll versions
QualcommQcn5022 FirmwareAll versions
QualcommQcn5052 FirmwareAll versions
QualcommQcn5121 FirmwareAll versions
QualcommQcn5122 FirmwareAll versions
QualcommQcn5124 FirmwareAll versions
QualcommQcn5152 FirmwareAll versions
QualcommQcn6023 FirmwareAll versions
QualcommQcn6024 FirmwareAll versions
QualcommQcn6224 FirmwareAll versions
QualcommQcn6274 FirmwareAll versions
QualcommQcn6402 FirmwareAll versions
QualcommQcn6412 FirmwareAll versions
QualcommQcn6422 FirmwareAll versions
QualcommQcn6432 FirmwareAll versions
QualcommQcn7606 FirmwareAll versions
QualcommQcn9000 FirmwareAll versions
QualcommQcn9011 FirmwareAll versions
QualcommQcn9012 FirmwareAll versions
QualcommQcn9013 FirmwareAll versions
QualcommQcn9022 FirmwareAll versions
QualcommQcn9024 FirmwareAll versions
QualcommQcn9070 FirmwareAll versions
QualcommQcn9072 FirmwareAll versions
QualcommQcn9074 FirmwareAll versions
QualcommQcn9160 FirmwareAll versions
QualcommQcn9274 FirmwareAll versions
QualcommQcs2290 FirmwareAll versions
QualcommQcs410 FirmwareAll versions
QualcommQcs4290 FirmwareAll versions
QualcommQcs4490 FirmwareAll versions
QualcommQcs5430 FirmwareAll versions
QualcommQcs610 FirmwareAll versions
QualcommQcs6125 FirmwareAll versions
QualcommQcs6490 FirmwareAll versions
QualcommSnapdragon 7c\+ Gen 3 Compute FirmwareAll versions
QualcommSnapdragon 8 Gen 1 Mobile Platform FirmwareAll versions
QualcommSnapdragon 8 Gen 2 Mobile Platform FirmwareAll versions
QualcommSnapdragon 8 Gen 3 Mobile Platform FirmwareAll versions
QualcommSnapdragon 8\+ Gen 1 Mobile Platform FirmwareAll versions
QualcommSnapdragon 8\+ Gen 2 Mobile Platform FirmwareAll versions
QualcommSnapdragon 845 Mobile Platform FirmwareAll versions
QualcommSnapdragon 850 Mobile Compute Platform FirmwareAll versions
QualcommSnapdragon 855 Mobile Platform FirmwareAll versions
QualcommSnapdragon 855\+\/860 Mobile Platform \(Sm8150-Ac\) FirmwareAll versions

Showing 50 of 342 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2025-21464?
Information disclosure while reading data from an image using specified offset and size parameters.
How severe is CVE-2025-21464?
CVE-2025-21464 has a CVSS score of 6.5/10 (MEDIUM severity). The EPSS model estimates a 0.08% probability of exploitation in the next 30 days.
How do I fix CVE-2025-21464?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2025-21464?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST