CVE-2025-21429

Q: What is the severity of CVE-2025-21429?

CVE-2025-21429 has a CVSS score of 7.5 (HIGH). This vulnerability allows memory corruption during Wi-Fi connection establishment between a station (STA) and access point (AP) when initiating an ADD TS (Traffic Stream) request. Attackers could potentially execute arbitrary code or cause denial of service on affected devices. This affects Qualcomm chipsets used in mobile devices, IoT products, and networking equipment.

7.5 HIGH

Denial of Service

📋 TL;DR

This vulnerability allows memory corruption during Wi-Fi connection establishment between a station (STA) and access point (AP) when initiating an ADD TS (Traffic Stream) request. Attackers could potentially execute arbitrary code or cause denial of service on affected devices. This affects Qualcomm chipsets used in mobile devices, IoT products, and networking equipment.

💻 Affected Systems

Products:

Qualcomm chipsets with Wi-Fi capabilities

Versions: Specific versions not detailed in reference; check Qualcomm advisory for exact affected chipsets

Operating Systems: Android, Linux-based systems using affected Qualcomm drivers

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices when connecting to Wi-Fi networks; exact product list requires checking Qualcomm's detailed bulletin

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Remote code execution leading to complete device compromise, data theft, or persistent backdoor installation

🟠

Likely Case

Denial of service causing Wi-Fi connectivity disruption or device crashes requiring reboot

🟢

If Mitigated

Limited impact with proper network segmentation and updated firmware

🌐 Internet-Facing: MEDIUM - Requires proximity to target network but no authentication needed

🏢 Internal Only: MEDIUM - Internal attackers could exploit within wireless range

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: MEDIUM

Exploitation requires proximity to target device and knowledge of Wi-Fi protocol manipulation

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check Qualcomm April 2025 security bulletin for specific firmware versions

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html

Restart Required: Yes

Instructions:

1. Check device manufacturer for firmware updates 2. Apply Qualcomm-provided patches 3. Reboot device 4. Verify Wi-Fi functionality

🔧 Temporary Workarounds

Disable Wi-Fi when not needed

linux

Turn off Wi-Fi radio to prevent connection attempts

nmcli radio wifi off
ip link set wlan0 down

Use wired connections

all

Prefer Ethernet over Wi-Fi for critical systems

🧯 If You Can't Patch

Segment Wi-Fi networks to limit attack surface
Implement network monitoring for abnormal Wi-Fi connection patterns

🔍 How to Verify

Check if Vulnerable:

Check device chipset model and firmware version against Qualcomm advisory

Check Version:

cat /sys/class/net/wlan0/device/uevent | grep DRIVER_VERSION

Verify Fix Applied:

Verify firmware version matches patched version from manufacturer

📡 Detection & Monitoring

Log Indicators:

Multiple failed Wi-Fi connection attempts
Kernel panics or crashes during Wi-Fi association
Unexpected driver reloads

Network Indicators:

Abnormal ADD TS request patterns
Malformed 802.11 management frames

SIEM Query:

source="wifi_logs" AND (event="connection_failed" OR event="driver_crash")

📊 Metadata

CVE ID: CVE-2025-21429

CVSS v3 Score: 7.5 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-126

EPSS Score: 0.35% exploit probability (57.1th percentile)

Published: April 7, 2025

Last Updated: February 10, 2026

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

9206 Lte Modem Firmware by Qualcomm

Apq8017 Firmware by Qualcomm

Apq8064au Firmware by Qualcomm

Aqt1000 Firmware by Qualcomm

Ar8035 Firmware by Qualcomm

C V2x 9150 Firmware by Qualcomm

Csra6620 Firmware by Qualcomm

Csra6640 Firmware by Qualcomm

Csrb31024 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6800 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Mdm9250 Firmware by Qualcomm

Mdm9628 Firmware by Qualcomm

Mdm9640 Firmware by Qualcomm

Mdm9650 Firmware by Qualcomm

Msm8996au Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qca6174a Firmware by Qualcomm

Qca6175a Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6420 Firmware by Qualcomm

Qca6421 Firmware by Qualcomm

Qca6426 Firmware by Qualcomm

Qca6430 Firmware by Qualcomm

Qca6431 Firmware by Qualcomm

Qca6436 Firmware by Qualcomm

Qca6554a Firmware by Qualcomm

Qca6564 Firmware by Qualcomm

Qca6564a Firmware by Qualcomm

Qca6564au Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6678aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6777aq Firmware by Qualcomm

Qca6787aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qca9367 Firmware by Qualcomm

Qca9377 Firmware by Qualcomm

Qcc2073 Firmware by Qualcomm

Qcc2076 Firmware by Qualcomm

Qcm2290 Firmware by Qualcomm

Qcm4290 Firmware by Qualcomm

Qcm5430 Firmware by Qualcomm

Qcm6125 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcn6024 Firmware by Qualcomm

Qcn9024 Firmware by Qualcomm

Qcn9074 Firmware by Qualcomm

Qcs2290 Firmware by Qualcomm

Qcs410 Firmware by Qualcomm

Qcs4290 Firmware by Qualcomm

Qcs5430 Firmware by Qualcomm

Qcs610 Firmware by Qualcomm

Qcs6125 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qualcomm 205 Mobile Platform Firmware by Qualcomm

Sa2150p Firmware by Qualcomm

Sa4150p Firmware by Qualcomm

Sa4155p Firmware by Qualcomm

Sa6145p Firmware by Qualcomm

Sa6150p Firmware by Qualcomm

Sa6155 Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa8145p Firmware by Qualcomm