CVE-2025-21427

Q: What is the severity of CVE-2025-21427?

CVE-2025-21427 has a CVSS score of 8.2 (HIGH). This vulnerability allows information disclosure when a User Equipment (UE) device receives RTP packets from the network. It affects mobile devices with Qualcomm chipsets that process RTP traffic. Attackers could potentially read sensitive data from memory.

8.2 HIGH

📋 TL;DR

This vulnerability allows information disclosure when a User Equipment (UE) device receives RTP packets from the network. It affects mobile devices with Qualcomm chipsets that process RTP traffic. Attackers could potentially read sensitive data from memory.

💻 Affected Systems

Products:

Qualcomm chipsets with RTP processing capabilities

Versions: Specific versions not detailed in reference; check Qualcomm July 2025 bulletin

Operating Systems: Android and other mobile OS using affected Qualcomm components

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices with Qualcomm chipsets that process RTP traffic; exact models require checking Qualcomm advisory

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Attackers could read sensitive information from device memory, potentially exposing authentication credentials, personal data, or cryptographic keys.

🟠

Likely Case

Information leakage of non-critical data from RTP packet processing buffers, potentially revealing metadata about communications.

🟢

If Mitigated

Limited exposure of non-sensitive data with proper network segmentation and access controls in place.

🌐 Internet-Facing: MEDIUM

🏢 Internal Only: LOW

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: MEDIUM

Requires sending specially crafted RTP packets to target device; network access needed

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check Qualcomm July 2025 security bulletin for specific patch versions

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html

Restart Required: Yes

Instructions:

1. Check Qualcomm advisory for affected chipset versions. 2. Apply firmware updates from device manufacturer. 3. Reboot device after update.

🔧 Temporary Workarounds

Network filtering

all

Block or filter RTP traffic at network perimeter

Disable vulnerable services

all

Disable RTP processing services if not required

🧯 If You Can't Patch

Segment network to restrict RTP traffic to trusted sources only
Implement network monitoring for anomalous RTP traffic patterns

🔍 How to Verify

Check if Vulnerable:

Check device chipset version and compare against Qualcomm advisory

Check Version:

Device-specific commands vary; typically in Settings > About Phone > Baseband version

Verify Fix Applied:

Verify firmware version has been updated to patched version

📡 Detection & Monitoring

Log Indicators:

Unusual RTP packet processing errors
Memory access violations in RTP stack

Network Indicators:

Malformed RTP packets targeting devices
Unexpected RTP traffic to mobile devices

SIEM Query:

Search for RTP protocol anomalies or memory access violations in device logs

📊 Metadata

CVE ID: CVE-2025-21427

CVSS v3 Score: 8.2 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

CWE: CWE-126

EPSS Score: 0.05% exploit probability (15.5th percentile)

Published: July 8, 2025

Last Updated: February 11, 2026

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

205 Mobile Firmware by Qualcomm

215 Mobile Firmware by Qualcomm

Apq8064au Firmware by Qualcomm

Aqt1000 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6800 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Msm8996au Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qca6310 Firmware by Qualcomm

Qca6320 Firmware by Qualcomm

Qca6335 Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6420 Firmware by Qualcomm

Qca6426 Firmware by Qualcomm

Qca6430 Firmware by Qualcomm

Qca6436 Firmware by Qualcomm

Qca6564 Firmware by Qualcomm

Qca6564a Firmware by Qualcomm

Qca6564au Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6678aq Firmware by Qualcomm

Qca6688aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qcm5430 Firmware by Qualcomm

Qcm6125 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcm8550 Firmware by Qualcomm

Qcn9274 Firmware by Qualcomm

Qcs410 Firmware by Qualcomm

Qcs4490 Firmware by Qualcomm

Qcs5430 Firmware by Qualcomm

Qcs610 Firmware by Qualcomm

Qcs6125 Firmware by Qualcomm

Qcs615 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qcs8300 Firmware by Qualcomm

Qcs8550 Firmware by Qualcomm

Qcs9100 Firmware by Qualcomm

Robotics Rb3 Firmware by Qualcomm

Sa4150p Firmware by Qualcomm

Sa4150p Firmware by Qualcomm

Sa4155p Firmware by Qualcomm

Sa6145p Firmware by Qualcomm

Sa6150p Firmware by Qualcomm

Sa6155 Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa7255p Firmware by Qualcomm

Sa7775p Firmware by Qualcomm

Sa8145p Firmware by Qualcomm

Sa8150p Firmware by Qualcomm

Sa8155 Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sa8620p Firmware by Qualcomm

Sa8650p Firmware by Qualcomm

Sa8775p Firmware by Qualcomm

Sa9000p Firmware by Qualcomm

Sd 8 Gen1 5g Firmware by Qualcomm

Sd626 Firmware by Qualcomm

Sd660 Firmware by Qualcomm

Sd670 Firmware by Qualcomm

Sd730 Firmware by Qualcomm

Sd835 Firmware by Qualcomm