Improper Authentication in Qualcomm products - CVE-2025-21450

Vulnerability identifier: #VU112356

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-21450

CWE-ID: CWE-287

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to read and manipulate data.

The vulnerability exists due to improper input validation in GPS_GNSS. A remote attacker can read and manipulate data.

Snapdragon 8+ Gen 1 Mobile Platform
SW5100P
SW5100
Snapdragon X75 5G Modem-RF System
Snapdragon X72 5G Modem-RF System
Snapdragon X65 5G Modem-RF System
Snapdragon X62 5G Modem-RF System
Snapdragon X35 5G Modem-RF System
Snapdragon X32 5G Modem-RF System
Snapdragon W5+ Gen 1 Wearable Platform
Snapdragon Auto 5G Modem-RF Gen 2
Snapdragon Auto 5G Modem-RF
Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
Snapdragon 888 5G Mobile Platform
WCD9340
Snapdragon 8 Gen 3 Mobile Platform
Snapdragon 8 Gen 1 Mobile Platform
Snapdragon 7c+ Gen 3 Compute
Snapdragon 782G Mobile Platform (SM7325-AF)
Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)
Snapdragon 778G 5G Mobile Platform
Snapdragon 695 5G Mobile Platform
Snapdragon 480+ 5G Mobile Platform (SM4350-AC)
Snapdragon 480 5G Mobile Platform
Snapdragon 4 Gen 1 Mobile Platform
SM8750P
SM8750
WCN6650
WSA8845H
WSA8845
WSA8840
WSA8835
WSA8830
WSA8815
WSA8810
WCN7881
WCN7880
WCN7861
WCN7860
WCN6755
SM8650Q
WCN6450
WCN3988
WCN3980
WCN3950
WCD9395
WCD9390
WCD9385
WCD9380
WCD9378
WCD9375
WCD9370
WCD9360
QCA6696
QCN6274
QCN6224
QCN6024
QCM8550
QCM6490
QCM5430
QCM4490
QCC710
QCA8337
QCA8081
QCA6797AQ
QCA6698AU
QCA6698AQ
QCN9011
QCA6688AQ
QCA6678AQ
QCA6595AU
QCA6584AU
QCA6574A
QCA6391
FastConnect 7800
FastConnect 6900
FastConnect 6700
FastConnect 6200
SDX61
SM8635P
SM8635
SM7675P
SM7675
SM7635P
SM7635
SM7325P
SM6650P
SM6650
SM6370
SM4635
SG8275P
SDX80M
AR8035
SD 8 Gen1 5G
Qualcomm Video Collaboration VC3 Platform
QFW7124
QFW7114
QEP8111
QCS8550
QCS6490
QCS5430
QCS4490
QCN9024
QCN9012
WSA8832
QCA6574AU
QCA6174A
SDX55
Google Android

Install security update from vendor's website.

Google Android - addressed in versions 13 2025-09-05, 14 2025-09-05, 15 2025-09-05, 16 2025-09-05

• https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html

• Multiple vulnerabilities in Qualcomm chipsets
• Multiple vulnerabilities in Google Android