CVE-2025-21485

HIGH

Qualcomm Fastconnect 6900 Firmware - TOCTOU Race Condition

Title source: rule

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.

CVSS v3 7.8

EPSS 0.0005

EPSS Percentile 16.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-367

Status published

Products (29)

qualcomm/fastconnect_6900_firmware

qualcomm/fastconnect_7800_firmware

qualcomm/qmp1000_firmware

qualcomm/sm8735_firmware

qualcomm/sm8750_firmware

qualcomm/sm8750p_firmware

qualcomm/snapdragon_8_gen_3_mobile_platform_firmware

qualcomm/snapdragon_w5\+_gen_1_wearable_platform_firmware

qualcomm/sw5100_firmware

qualcomm/sw5100p_firmware

... and 19 more

Published Jun 03, 2025

Tracked Since Feb 18, 2026