CVE-2025-21459

Q: What is the severity of CVE-2025-21459?

CVE-2025-21459 has a CVSS score of 7.5 (HIGH). This vulnerability allows attackers to cause a Denial of Service (DoS) condition by sending specially crafted ML IE (Management Information Element) packets during per-STA profile parsing. It affects Qualcomm wireless chipsets and devices using vulnerable firmware. The attack can temporarily disrupt wireless connectivity on affected devices.

7.5 HIGH

Denial of Service

📋 TL;DR

This vulnerability allows attackers to cause a Denial of Service (DoS) condition by sending specially crafted ML IE (Management Information Element) packets during per-STA profile parsing. It affects Qualcomm wireless chipsets and devices using vulnerable firmware. The attack can temporarily disrupt wireless connectivity on affected devices.

💻 Affected Systems

Products:

Qualcomm wireless chipsets and devices with vulnerable firmware

Versions: Specific versions not publicly detailed in the bulletin; affected versions are those prior to May 2025 security updates.

Operating Systems: Android, Linux-based systems using Qualcomm wireless drivers

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices using Qualcomm wireless chipsets with vulnerable firmware versions. The exact product list may be detailed in the vendor advisory.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete wireless connectivity disruption on affected devices requiring reboot or firmware reflash to restore functionality.

🟠

Likely Case

Temporary wireless disconnection or degraded performance until the system recovers from the parsing error.

🟢

If Mitigated

Minimal impact with proper network segmentation and monitoring to detect anomalous traffic patterns.

🌐 Internet-Facing: MEDIUM - Attackers could target exposed wireless interfaces, but requires proximity or network access.

🏢 Internal Only: MEDIUM - Internal attackers or compromised devices could exploit this to disrupt local wireless networks.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: MEDIUM

Exploitation requires sending crafted ML IE packets to vulnerable devices, which may need proximity or network access. No public exploit code is known at this time.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: May 2025 security updates from Qualcomm

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html

Restart Required: Yes

Instructions:

1. Check with device manufacturer for firmware updates. 2. Apply Qualcomm May 2025 security patches. 3. Reboot device after update. 4. Verify firmware version is updated.

🔧 Temporary Workarounds

Network segmentation

all

Isolate wireless networks from untrusted networks to reduce attack surface.

Disable unnecessary wireless features

all

Turn off unused wireless protocols or features that might be vulnerable.

🧯 If You Can't Patch

Implement network monitoring for anomalous ML IE traffic patterns.
Use wireless intrusion detection systems to alert on potential exploitation attempts.

🔍 How to Verify

Check if Vulnerable:

Check device firmware version against Qualcomm's May 2025 security bulletin. Use 'cat /proc/version' or manufacturer-specific commands on Linux/Android devices.

Check Version:

Manufacturer-specific commands vary; on Android: 'getprop ro.build.fingerprint' or check Settings > About Phone.

Verify Fix Applied:

Verify firmware version has been updated to a version after May 2025 patches. Monitor for wireless stability after update.

📡 Detection & Monitoring

Log Indicators:

Wireless driver crashes
Unexpected disconnections
Kernel panic logs related to wireless modules

Network Indicators:

Anomalous ML IE packets
Unusual wireless management frame patterns

SIEM Query:

Search for wireless interface errors or driver crash events in system logs.

📊 Metadata

CVE ID: CVE-2025-21459

CVSS v3 Score: 7.5 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-126

EPSS Score: 0.12% exploit probability (30.4th percentile)

Published: May 6, 2025

Last Updated: August 11, 2025

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html Patch,Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Ar8035 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Flight Rb5 5g Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8620p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qamsrv1h Firmware by Qualcomm

Qamsrv1m Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6554a Firmware by Qualcomm

Qca6564au Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6678aq Firmware by Qualcomm

Qca6688aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6777aq Firmware by Qualcomm

Qca6787aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qcc2073 Firmware by Qualcomm

Qcc2076 Firmware by Qualcomm

Qcc710 Firmware by Qualcomm

Qcm5430 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcm8550 Firmware by Qualcomm

Qcn6224 Firmware by Qualcomm

Qcn6274 Firmware by Qualcomm

Qcn9011 Firmware by Qualcomm

Qcn9012 Firmware by Qualcomm

Qcn9274 Firmware by Qualcomm

Qcs5430 Firmware by Qualcomm

Qcs615 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qcs7230 Firmware by Qualcomm

Qcs8250 Firmware by Qualcomm

Qcs8300 Firmware by Qualcomm

Qcs8550 Firmware by Qualcomm

Qcs9100 Firmware by Qualcomm

Qfw7114 Firmware by Qualcomm

Qfw7124 Firmware by Qualcomm

Qmp1000 Firmware by Qualcomm

Qrb5165n Firmware by Qualcomm

Robotics Rb5 Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa7255p Firmware by Qualcomm

Sa7775p Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sa8620p Firmware by Qualcomm

Sa8650p Firmware by Qualcomm

Sa8770p Firmware by Qualcomm

Sa8775p Firmware by Qualcomm

Sa9000p Firmware by Qualcomm

Sg8275p Firmware by Qualcomm

Sm6650 Firmware by Qualcomm

Sm6650p Firmware by Qualcomm

Sm7635 Firmware by Qualcomm

Sm7675 Firmware by Qualcomm

Sm7675p Firmware by Qualcomm

Sm8550p Firmware by Qualcomm

Sm8635 Firmware by Qualcomm

Sm8635p Firmware by Qualcomm

Sm8650q Firmware by Qualcomm

Sm8735 Firmware by Qualcomm