CVE-2025-21472

MEDIUM

Qualcomm FastConnect and Snapdragon Firmware - Information Disclosure via eSE Debug Log Capture

Title source: llm
STIX 2.1

Description

Information disclosure while capturing logs as eSE debug messages are logged.

References (1)

Core 1

Scores

CVSS v3 5.5
EPSS 0.0008
EPSS Percentile 0.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-489
Status published
Products (12)
qualcomm/fastconnect_6900_firmware
qualcomm/fastconnect_7800_firmware
qualcomm/qca9367_firmware
qualcomm/qca9377_firmware
qualcomm/qcs8550_firmware
qualcomm/sa8530p_firmware
qualcomm/sa8540p_firmware
qualcomm/sa9000p_firmware
qualcomm/snapdragon_8_gen_1_mobile_platform_firmware
qualcomm/wcd9380_firmware
... and 2 more
Published Aug 06, 2025
Tracked Since Feb 18, 2026