CVE-2025-21458
Published Aug 6, 2025Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
- evidence mentions
- 1
- Buzz score
- 11.9
Loading current evidence
Historical archive search
Search decades of CVEs by regex, severity, date, CWE, vendor/product tags, KEV, PoC, and other evidence.
Results
407 results · Sorted by Highest Buzz score first
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
Transient DOS while parsing per STA profile in ML IE.
Memory corruption when programming registers through virtual CDM.
Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.
Transient DOS while processing the EHT operation IE in the received beacon frame.
Memory corruption while processing a private escape command in an event trigger.
Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call.
Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.
Information disclosure while capturing logs as eSE debug messages are logged.
Memory corruption when using Virtual cdm (Camera Data Mover) to write registers.
Memory corruption while processing commands from A2dp sink command queue.
Memory corruption while processing escape code, when DisplayId is passed with large unsigned value.
Transient DOS while processing CCCH data when NW sends data with invalid length.
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.
Memory corruption while selecting the PLMN from SOR failed list.
Information disclosure when Video engine escape input data is less than expected minimum size.
Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.
Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.
Transient DOS while processing video packets received from video firmware.
Memory corruption while processing video packets received from video firmware.
Memory corruption while processing manipulated payload in video firmware.
Every filter state lives in the URL so you can bookmark, share, and crawl exact historical slices instead of a client-only search session.
Buzz order uses the latest all-time evidence snapshot, refreshed every two hours. Evidence-bearing CVEs rank first; records without a snapshot continue newest-first.