Out-of-bounds write in Qualcomm products - CVE-2025-21462

Vulnerability identifier: #VU108704

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-21462

CWE-ID: CWE-787

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to improper input validation in Computer Vision. A local application can execute arbitrary code.

FastConnect 6900
FastConnect 7800
SA4150P
SA4155P
SA8155P
SA8195P
SC8380XP
WCD9380
WCD9385
WSA8840
WSA8845
WSA8845H
SA6155P
XPS 13 9345
Qualcomm MIPI Camera Driver

Install security update from vendor's website.

Qualcomm MIPI Camera Driver - update to 1.1.0.54

• https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2025-bulletin.html

• Multiple vulnerabilities in Qualcomm chipsets
• Dell update for Qualcomm Camera driver