CVE-2025-21434: High Severity Vulnerability in qcom-opensource WLAN QCACLD-3.0 Package
Summary
CVE-2025-21434: ... Affects platform/vendor/qcom-opensource/wlan/qcacld-3.0 versions >= SoCVersion:0, < SoCVersion:2025-04-05. Fixed in SoCVersion:2025-04-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The qcom-opensource WLAN QCACLD-3.0 package is a critical component of Android's wireless communication stack, responsible for managing Wi-Fi connectivity and ensuring efficient data transmission. This package is integral to the operation of various Qualcomm-based devices, providing essential functionalities such as connection management, data handling, and protocol compliance. However, its complexity and extensive integration within the Android ecosystem make it susceptible to vulnerabilities that could compromise device security and performance.
Vulnerability Detail
CVE-2025-21434 is a high severity vulnerability found in the qcom-opensource WLAN QCACLD-3.0 package. This vulnerability originates from improper handling of certain input data within the parser_api.c file, which can lead to potential memory corruption or denial of service. If exploited, attackers could leverage this vulnerability to disrupt wireless communication or execute arbitrary code, posing significant risks to device integrity and user data.
How To Fix
Minimum fixed version
SoCVersion:2025-04-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable Wi-Fi on affected devices until the patch is applied. This can be done by navigating to the device settings, selecting 'Network & Internet', and toggling off the Wi-Fi option.
Conclusion
CVE-2025-21434 represents a significant security risk within the qcom-opensource WLAN QCACLD-3.0 package, necessitating prompt action from users to update their systems. By following the recommended steps to apply the patch and considering temporary workarounds, users can protect their devices from potential exploitation.
See every vulnerability recorded for platform/vendor/qcom-opensource/wlan/qcacld-3.0 →
FAQ
CVE-2025-21434 is a high severity vulnerability in the qcom-opensource WLAN QCACLD-3.0 package that can lead to memory corruption or denial of service.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Exploitation of this vulnerability could result in disrupted wireless communication or unauthorized access to device functions, potentially compromising user data.
Yes, a patch for CVE-2025-21434 was released on April 5, 2025. Users are advised to update their packages to this version.
As a temporary measure, you can disable Wi-Fi on your device to mitigate the risk until the patch is applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/vendor/qcom-opensource/wlan/qcacld-3.0.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
