CVE-2025-21423 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
qualcomm	CNA	7.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 4%

Vendor	Product	Version
qualcomm	aqt1000_firmware	-
qualcomm	fastconnect_6200_firmware	-
qualcomm	fastconnect_6700_firmware	-
qualcomm	fastconnect_6800_firmware	-
qualcomm	fastconnect_6900_firmware	-
qualcomm	fastconnect_7800_firmware	-
qualcomm	qca6391_firmware	-
qualcomm	qca6420_firmware	-
qualcomm	qca6430_firmware	-
qualcomm	qcm5430_firmware	-
qualcomm	qcm6490_firmware	-
qualcomm	qcs5430_firmware	-
qualcomm	qcs6490_firmware	-
qualcomm	video_collaboration_vc3_platform_firmware	-
qualcomm	sc8180x\+sdx55_firmware	-
qualcomm	sc8380xp_firmware	-
qualcomm	sm6250_firmware	-
qualcomm	snapdragon_7c_compute_platform_\(sc7180-ac\)_firmware	-
qualcomm	snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"_firmware	-
qualcomm	snapdragon_7c\+_gen_3_compute_firmware	-
qualcomm	snapdragon_8c_compute_platform_\(sc8180x-ad\)_firmware	-
qualcomm	snapdragon_8c_compute_platform_\(sc8180xp-ad\)_firmware	-
qualcomm	snapdragon_8cx_compute_platform_\(sc8180x-aa\)_firmware	-
qualcomm	snapdragon_8cx_compute_platform_\(sc8180x-ab\)_firmware	-
qualcomm	snapdragon_8cx_compute_platform_\(sc8180xp-ac\)_firmware	-
qualcomm	snapdragon_8cx_compute_platform_\(sc8180xp-af\)_firmware	-
qualcomm	snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\)_firmware	-
qualcomm	snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-af\)_firmware	-
qualcomm	snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\)_firmware	-
qualcomm	snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-ab\)_firmware	-
qualcomm	snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware	-
qualcomm	snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware	-
qualcomm	wcd9340_firmware	-
qualcomm	wcd9341_firmware	-
qualcomm	wcd9370_firmware	-
qualcomm	wcd9375_firmware	-
qualcomm	wcd9380_firmware	-
qualcomm	wcd9385_firmware	-
qualcomm	wsa8810_firmware	-
qualcomm	wsa8815_firmware	-
qualcomm	wsa8830_firmware	-
qualcomm	wsa8835_firmware	-
qualcomm	wsa8840_firmware	-
qualcomm	wsa8845_firmware	-
qualcomm	wsa8845h_firmware	-

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-129 - Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html