CVE-2025-21459: High Severity Vulnerability in qcom-opensource WLAN QCACLD-3.0 Package
Summary
CVE-2025-21459: ... Affects platform/vendor/qcom-opensource/wlan/qcacld-3.0 versions >= SoCVersion:0, < SoCVersion:2025-05-05. Fixed in SoCVersion:2025-05-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The qcom-opensource WLAN QCACLD-3.0 package is a component of the Android ecosystem that provides wireless connectivity functionalities. It is integral for devices that rely on Qualcomm's wireless technology, enabling features such as Wi-Fi connectivity and management. This package is widely used in various Android devices, making its security critical for maintaining device integrity and user safety.
Vulnerability Detail
CVE-2025-21459 is a high-severity vulnerability found in the qcom-opensource WLAN QCACLD-3.0 package. The vulnerability originates from a flaw in the lim_store_mlo_ie_raw_info function within the lim_mlo.c file, which can potentially allow unauthorized access or manipulation of wireless communication protocols. This could lead to severe ramifications, including data breaches or unauthorized network access, compromising the security of affected devices.
How To Fix
Minimum fixed version
SoCVersion:2025-05-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of their devices by disabling Wi-Fi functionalities until the package is updated. This can be done through the device settings under the Wi-Fi section.
Conclusion
CVE-2025-21459 presents a significant security risk within the qcom-opensource WLAN QCACLD-3.0 package. Users are strongly advised to update to the patched version to mitigate potential threats. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for platform/vendor/qcom-opensource/wlan/qcacld-3.0 →
FAQ
CVE-2025-21459 is a high-severity vulnerability in the qcom-opensource WLAN QCACLD-3.0 package that could allow unauthorized access to wireless communication.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The risks include potential data breaches and unauthorized access to network communications, which can compromise device security.
Yes, a patch is available as of May 5, 2025. Users should update to the latest version of the qcom-opensource WLAN QCACLD-3.0 package.
If immediate updates are not possible, consider disabling Wi-Fi functionalities on your device until the patch can be applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/vendor/qcom-opensource/wlan/qcacld-3.0.
